43898b7d32ada300cf138be81c36e08f59b2fc7371b35c8375cb11dd60746b97 | Triage

Analysis

max time kernel
4294181s
max time network
126s
platform
windows7_x64
resource
win7-20220311-es
submitted
21-03-2022 12:19

Sharing

Report Analysis Logs

General

Target

EOC-94-PDF.pdf
Size

17.1MB
MD5

82bcd575cc10c5ad456ecf2654569c3f
SHA1

4523162f564a6dd453d04239811b5df000999fc0
SHA256

43898b7d32ada300cf138be81c36e08f59b2fc7371b35c8375cb11dd60746b97
SHA512

fe68761a657dc4055d2ad2d5123a5bf1ce653d37f4c905ed2e50863dd374ad93036df9aeccdcc482fa7fb8d8066a7e00303be9f650b731f6c9a425dd308da9ed

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1576 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1576 AcroRd32.exe
1576 AcroRd32.exe
1576 AcroRd32.exe
1576 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EOC-94-PDF.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1576

C:\Program Files\Mozilla Firefox\default-browser-agent.exe
"C:\Program Files\Mozilla Firefox\default-browser-agent.exe" do-task
1⤵
PID:1180

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1576-54-0x00000000767D1000-0x00000000767D3000-memory.dmp

Filesize
8KB

Download