0639b26171d5bf7607ebd7da7d11fc039ce2ac3d5dcf41c5184e890e856ee0d3 | Triage

Analysis

max time kernel
4294210s
max time network
124s
platform
windows7_x64
resource
win7-20220311-en
submitted
22-03-2022 22:05

Sharing

Report Analysis Logs

General

Target

Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf
Size

195KB
MD5

01ed68faed0f8b7a466f9996b1a3e59f
SHA1

5d3947d98191f60a4281ccdea8a74e68bdc5efcc
SHA256

0639b26171d5bf7607ebd7da7d11fc039ce2ac3d5dcf41c5184e890e856ee0d3
SHA512

82af31e7ba67fcbd556710738eb6525cf5e4105e785d6ab5abfd09f9a505423efdcde339b3788d3941a0ae84287acf2591b9b3b5cf7546a899c5986db039ef94

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Approved Provider Renewal Life Share of Oklahoma 3 22 22.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2004

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-54-0x0000000074C61000-0x0000000074C63000-memory.dmp

Filesize
8KB

Download