69b66461f296b90f2ebb041b1a50fefd277940882bb72768f96ba8814df75b29 | Triage

Analysis

max time kernel
4294216s
max time network
126s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:21

Sharing

Report Analysis Logs

General

Target

69b66461f296b90f2ebb041b1a50fefd277940882bb72768f96ba8814df75b29.pdf
Size

41KB
MD5

fa78716d3d1111292128046f9f2841c3
SHA1

f7f15ecf1bf31c67825d366b4c9a7caa280cd81c
SHA256

69b66461f296b90f2ebb041b1a50fefd277940882bb72768f96ba8814df75b29
SHA512

6aec17f09da46f05d9ee029bd338be0dcdfe63bda468791898b588fd776c1bf9b55cf8540b929ecd4aebc858de7b31b934b7c6f319697924ff600e36b830c6a9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1800 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1800 AcroRd32.exe
1800 AcroRd32.exe
1800 AcroRd32.exe
1800 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69b66461f296b90f2ebb041b1a50fefd277940882bb72768f96ba8814df75b29.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1800

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1800-54-0x0000000075081000-0x0000000075083000-memory.dmp

Filesize
8KB

Download