151984f18676508e010f8932088cf5521571b589a3ee6bc3118d8e0f7e15554a | Triage

Analysis

max time kernel
4294213s
max time network
128s
platform
windows7_x64
resource
win7-20220310-en
submitted
14-03-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 140322.pdf
Size

275KB
MD5

a9c6466fab643842926a413dea6f4d04
SHA1

8666acec3f6274be1ae84ebf4891b5b1685238c1
SHA256

151984f18676508e010f8932088cf5521571b589a3ee6bc3118d8e0f7e15554a
SHA512

551e5db13b75c6600527dc18d494fc09d837e8d63c560e6e9d29b72ee9021bcddccec2b024fab79c1ba17d57547a7da6b93489f350393dcee4ed16bde9825ab8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 140322.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1808-54-0x00000000760A1000-0x00000000760A3000-memory.dmp

Filesize
8KB

Download