1585d4432949acd29d160c0d0748c4e695d837c40e4bd5ed9a229c4437f96160 | Triage

Analysis

max time kernel
4294210s
max time network
128s
platform
windows7_x64
resource
win7-20220311-en
submitted
19-03-2022 12:14

Sharing

Report Analysis Logs

General

Target

1585d4432949acd29d160c0d0748c4e695d837c40e4bd5ed9a229c4437f96160.pdf
Size

8.2MB
MD5

5e528b8ba38496feea95a628061d0acb
SHA1

4fe483160449b7d8303809fa3c5f0afe0eae72f2
SHA256

1585d4432949acd29d160c0d0748c4e695d837c40e4bd5ed9a229c4437f96160
SHA512

266dbf7ca8839b9c658d261754d725cab9de1dfffa97eeb67f7adc8a7c78de3b82f1187302045e5c61264ac8dc754254df1d6ddb3f854611eb288a8b0a8d855d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1844 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1844 AcroRd32.exe
1844 AcroRd32.exe
1844 AcroRd32.exe
1844 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1585d4432949acd29d160c0d0748c4e695d837c40e4bd5ed9a229c4437f96160.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1844

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1844-54-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download