6a3f24b7f6c88faa46cb0298fbce734ab763be3fa324c1a35bdfb7e72f6069ae | Triage

Analysis

max time kernel
4294219s
max time network
127s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:21

Sharing

Report Analysis Logs

General

Target

6a3f24b7f6c88faa46cb0298fbce734ab763be3fa324c1a35bdfb7e72f6069ae.pdf
Size

42KB
MD5

6295cb49286c821abc6ef3f7ba1c205d
SHA1

6d8e97954b22bf25fd1eefb10db972152736aa4b
SHA256

6a3f24b7f6c88faa46cb0298fbce734ab763be3fa324c1a35bdfb7e72f6069ae
SHA512

121a5c58c4b0f1bd1db1953327a6e1e4ba0c7de0c7261a270a335414018c08aa93fa13f957956e2e368ca16679a4bcd4e6c915c2e8970dd2efafc9549dfc3e85

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

900 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

900 AcroRd32.exe
900 AcroRd32.exe
900 AcroRd32.exe
900 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6a3f24b7f6c88faa46cb0298fbce734ab763be3fa324c1a35bdfb7e72f6069ae.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:900

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/900-54-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

Filesize
8KB

Download