6a8a4715eee5db3d9415f1eec255f04a8a68711c917ce5d4dbb361adb9bd2cb6 | Triage

Analysis

max time kernel
4294213s
max time network
127s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:20

Sharing

Report Analysis Logs

General

Target

6a8a4715eee5db3d9415f1eec255f04a8a68711c917ce5d4dbb361adb9bd2cb6.pdf
Size

48KB
MD5

871db4bf8ce8b66b1ae4f617470eaf30
SHA1

fc0a5d96846fe1cfad6b1714271d38a458c7dede
SHA256

6a8a4715eee5db3d9415f1eec255f04a8a68711c917ce5d4dbb361adb9bd2cb6
SHA512

09534c5e423b7898e4d1e128ee453ac6baf955f9a7fe77645c129640d219567518b9eb6c33d64cdb27a4f13b44c2b03579b6b2289c5955e33cf4c0167023d28f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1968 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1968 AcroRd32.exe
1968 AcroRd32.exe
1968 AcroRd32.exe
1968 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6a8a4715eee5db3d9415f1eec255f04a8a68711c917ce5d4dbb361adb9bd2cb6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-54-0x0000000076BC1000-0x0000000076BC3000-memory.dmp

Filesize
8KB

Download