69d8920b5ab5acc82eb26d5c8d3ef2dbbcdb68bb84d2b822c56be37d16b4db81 | Triage

Analysis

max time kernel
4294218s
max time network
134s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:21

Sharing

Report Analysis Logs

General

Target

69d8920b5ab5acc82eb26d5c8d3ef2dbbcdb68bb84d2b822c56be37d16b4db81.pdf
Size

42KB
MD5

58a883ceefb1024a73fdbb14712c5a13
SHA1

302357d0282c26b33692c539c6cecf21241babc1
SHA256

69d8920b5ab5acc82eb26d5c8d3ef2dbbcdb68bb84d2b822c56be37d16b4db81
SHA512

ed8a92d8ce52b8b2e05a6db1bef72a9b67e77da765473e5a3bdee5e3c7d972c3b2a92e5542ee77798efb429c77937e9b225a4e0ccebb91de33a20e6ca44b6be1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1268 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69d8920b5ab5acc82eb26d5c8d3ef2dbbcdb68bb84d2b822c56be37d16b4db81.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1268

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1268-54-0x0000000075A31000-0x0000000075A33000-memory.dmp

Filesize
8KB

Download