f7498c44b9c31ab19c72e5bcdcb7e8d2c5a652af3ccb68e20c23ce07d2397a95 | Triage

Analysis

max time kernel
4294213s
max time network
122s
platform
windows7_x64
resource
win7-20220311-en
submitted
23-03-2022 10:25

Sharing

Report Analysis Logs

General

Target

bankaccount.pdf
Size

31KB
MD5

27a93d57ec0b4f8f60672abf152ddea5
SHA1

bc700fcd78c09de6966611a3f3a28d689d43b506
SHA256

2d9116afa71d593ad82f522573e95eaf40012342e047b39dc7a2dc2a89055bee
SHA512

ac08e8d4723014e5a84ab3612741f28b2d36ac34b657c32fc520033f2b60d0b9b79ee175f6d36b026f59066dfe71f02a84826d310afa3df6737652872cdbdfaf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1104 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1104 AcroRd32.exe
1104 AcroRd32.exe
1104 AcroRd32.exe
1104 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bankaccount.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1104

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1104-54-0x0000000074F31000-0x0000000074F33000-memory.dmp

Filesize
8KB

Download