683353e51b6b608f67b0f35bdf16ce80146a63a3f11eab5594eda39b5a382446 | Triage

Analysis

max time kernel
4294212s
max time network
128s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:23

Sharing

Report Analysis Logs

General

Target

683353e51b6b608f67b0f35bdf16ce80146a63a3f11eab5594eda39b5a382446.pdf
Size

47KB
MD5

9e9838da8f8893c2ddaeaaedfa1421de
SHA1

49ddcb1a06c8aa5c54591645da95fa70a75d1bc1
SHA256

683353e51b6b608f67b0f35bdf16ce80146a63a3f11eab5594eda39b5a382446
SHA512

d500005b4ce2f3a3cf59f06e503abb99481ad065ef7eca672508e0f747b285a69a4e86649daa89975324d3426cd730f8e499d0f98d09cb15eee9e4d19bee8870

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1072 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1072 AcroRd32.exe
1072 AcroRd32.exe
1072 AcroRd32.exe
1072 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\683353e51b6b608f67b0f35bdf16ce80146a63a3f11eab5594eda39b5a382446.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1072

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1072-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download