69fb6d114050e4bfc006724af987cce15c8b74381c188d4b72310e87ed25370f | Triage

Analysis

max time kernel
4294213s
max time network
126s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:21

Sharing

Report Analysis Logs

General

Target

69fb6d114050e4bfc006724af987cce15c8b74381c188d4b72310e87ed25370f.pdf
Size

46KB
MD5

6abc1424017a657eec394caef1ed9f47
SHA1

e85fb5dd6c9970ddc425b5a0f8a9bb19338105d9
SHA256

69fb6d114050e4bfc006724af987cce15c8b74381c188d4b72310e87ed25370f
SHA512

407feb7af6c589ed289a0adcbc069145ccfee097e90956940b3499db5337a0e8eb1493ac4e1394163511596fc6d3e381ec51566507deefa8baf8fdb60d1282f1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

628 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

628 AcroRd32.exe
628 AcroRd32.exe
628 AcroRd32.exe
628 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69fb6d114050e4bfc006724af987cce15c8b74381c188d4b72310e87ed25370f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:628

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/628-54-0x0000000075B01000-0x0000000075B03000-memory.dmp

Filesize
8KB

Download