4847116b64f0897f6d49942a10fe7aa1fb653843153a313a15784d06c46c152b | Triage

Analysis

max time kernel
654s
max time network
1563s
platform
windows7_x64
resource
win7-20220310-en
submitted
13-03-2022 14:00

Sharing

Report Analysis Logs

General

Target

slides.pdf
Size

52KB
MD5

19341b874288adbfc80b9029db787375
SHA1

003e97fb06879a4136678e89d092ccb3b644ee2c
SHA256

f0500c6ad495ddbde5d4c378760302bf20d805cbe23bedd1dd20855e82dc8b3e
SHA512

c5bcd9e4cbb6e2bb2c8083b96ff0ef72aca3fd03ecc0e895e4b05fa7aee4ca899d1ab17964d895b6ba6413b9c4cf23bc47bc4ed804db47b524e4c787e0b1569a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2016 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2016 AcroRd32.exe
2016 AcroRd32.exe
2016 AcroRd32.exe
2016 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\slides.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2016

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-54-0x0000000075041000-0x0000000075043000-memory.dmp

Filesize
8KB

Download