f8f7c023c29cdf0b4b17389a4dc0ec27a604a3aa8526835b93b397680097e618 | Triage

Analysis

max time kernel
4294179s
max time network
121s
platform
windows7_x64
resource
win7-20220311-en
submitted
17-03-2022 09:41

Sharing

Report Analysis Logs

General

Target

COP1-Silabus Peserta DTS PRO 2022 .pdf
Size

851KB
MD5

61008bd4f1f3494f634b93e81e5aacdf
SHA1

e18e94e46eb05150ce143992f6b9455fa79a1155
SHA256

f8f7c023c29cdf0b4b17389a4dc0ec27a604a3aa8526835b93b397680097e618
SHA512

57b3e7268ba67a01e860a271c6cd785bad9be97b9cd105069b7e3c21458bde78f70ddfd7a9c642a71341f49740ae1e53f92ecde6913ac67739e330be28081296

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\COP1-Silabus Peserta DTS PRO 2022 .pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1568

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1568-54-0x0000000076851000-0x0000000076853000-memory.dmp

Filesize
8KB

Download