96e8dbc97ebfc6e7415645e9c420384a0e3c1d1bf0eded5ad9616e7802fafc66 | Triage

Analysis

max time kernel
4294212s
max time network
122s
platform
windows7_x64
resource
win7-20220310-en
submitted
16-03-2022 02:09

Sharing

Report Analysis Logs

General

Target

DTO 160322.pdf
Size

273KB
MD5

5ad39bb320abb7c238199f279b5ba955
SHA1

016f190db51b5fba8636f059b68f05521f5d19b8
SHA256

96e8dbc97ebfc6e7415645e9c420384a0e3c1d1bf0eded5ad9616e7802fafc66
SHA512

cffba4dd4b8b91b6277a878937c25082a0e4480893cc85fb776b3f5a842339ef8c1bf3ef26b35a6ba917e68b62317a24ec04d5328a0c588a3b4036a24afc9e06

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1688 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1688 AcroRd32.exe
1688 AcroRd32.exe
1688 AcroRd32.exe
1688 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 160322.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1688

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1688-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download