0c3c80ad350a7278140de617d1042c01f666bd5b4f305d106f21f4708f017046 | Triage

Analysis

max time kernel
4294211s
max time network
124s
platform
windows7_x64
resource
win7-20220311-en
submitted
12-03-2022 06:06

Sharing

Report Analysis Logs

General

Target

2021 Personal Tax Organizer - fillable.pdf
Size

540KB
MD5

6330e179cbb18a67792fc02cae313dcc
SHA1

d801a84537ec933661eb5488ae566a948c7419de
SHA256

0c3c80ad350a7278140de617d1042c01f666bd5b4f305d106f21f4708f017046
SHA512

5a233bd8e87c0489bbd205e19aad139461e1334bf3c44bbbd3d2bd434836e84b17b9d05e83975cfc1674adf2f65b7b219c30686392b1c54cb17c241c0a35fd41

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1504 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1504 AcroRd32.exe
1504 AcroRd32.exe
1504 AcroRd32.exe
1504 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2021 Personal Tax Organizer - fillable.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1504

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x0000000075561000-0x0000000075563000-memory.dmp

Filesize
8KB

Download