69e3332c39ce2c9a57026b9b054a17e9c2cb6c338050bd0cd68e1622985d2758 | Triage

Analysis

max time kernel
4294215s
max time network
130s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:21

Sharing

Report Analysis Logs

General

Target

69e3332c39ce2c9a57026b9b054a17e9c2cb6c338050bd0cd68e1622985d2758.pdf
Size

59KB
MD5

8db941ca630959c78491950c08d68b17
SHA1

54a0f2b3e6c6020108b09c0f43e5fab0626b7910
SHA256

69e3332c39ce2c9a57026b9b054a17e9c2cb6c338050bd0cd68e1622985d2758
SHA512

baaf534fbed1acb9331b6749d7e42ce65fe924dee2ba5a2e88b3a195b9045681ad6a55508544a34e01af3b8c64555872572af3e36749edcd96440642e92c22c4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1988 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1988 AcroRd32.exe
1988 AcroRd32.exe
1988 AcroRd32.exe
1988 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69e3332c39ce2c9a57026b9b054a17e9c2cb6c338050bd0cd68e1622985d2758.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1988

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1988-54-0x0000000075041000-0x0000000075043000-memory.dmp

Filesize
8KB

Download