e4f86bb247127cf6b1a715ab9c1a1b593437c164bad55fc3eb61f53ed347b433 | Triage

Resubmissions

23-03-2022 13:36

220323-qwl4zafad7 3

23-03-2022 13:26

220323-qpmrxsehe8 3

Analysis

max time kernel
4294211s
max time network
127s
platform
windows7_x64
resource
win7-20220311-en
submitted
23-03-2022 13:36

Sharing

Report Analysis Logs

General

Target

Brochure.pdf
Size

1.2MB
MD5

6a95346d0186a916330882780ad07601
SHA1

cdfc2be0f44014bf6a8d08875b10d0cc8692d169
SHA256

e4f86bb247127cf6b1a715ab9c1a1b593437c164bad55fc3eb61f53ed347b433
SHA512

25702a17c18a8f6be4ed5acc805ebdc0f46839c9e613f951ae021c04779eb9908d74bb99cd29436ebf5a703a24bdcb49c666b15db425231e6b27a0f4aad19da1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1676 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1676 AcroRd32.exe
1676 AcroRd32.exe
1676 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Brochure.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1676-54-0x0000000075E51000-0x0000000075E53000-memory.dmp

Filesize
8KB

Download
memory/1676-55-0x0000000000C80000-0x0000000000CF6000-memory.dmp

Filesize
472KB

Download