Analysis
-
max time kernel
4294210s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20220311-en -
submitted
22-03-2022 22:05
Behavioral task
behavioral1
Sample
Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf
Resource
win7-20220311-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf
Resource
win10v2004-20220310-en
0 signatures
0 seconds
General
-
Target
Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf
-
Size
195KB
-
MD5
01ed68faed0f8b7a466f9996b1a3e59f
-
SHA1
5d3947d98191f60a4281ccdea8a74e68bdc5efcc
-
SHA256
0639b26171d5bf7607ebd7da7d11fc039ce2ac3d5dcf41c5184e890e856ee0d3
-
SHA512
82af31e7ba67fcbd556710738eb6525cf5e4105e785d6ab5abfd09f9a505423efdcde339b3788d3941a0ae84287acf2591b9b3b5cf7546a899c5986db039ef94
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2004 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2004 AcroRd32.exe 2004 AcroRd32.exe 2004 AcroRd32.exe 2004 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2004-54-0x0000000074C61000-0x0000000074C63000-memory.dmpFilesize
8KB