67feb111c5a984f5d5c48a65b925ea7af4918a5360a5f3caf2e975377991177c | Triage

Analysis

max time kernel
4294212s
max time network
121s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:23

Sharing

Report Analysis Logs

General

Target

67feb111c5a984f5d5c48a65b925ea7af4918a5360a5f3caf2e975377991177c.pdf
Size

45KB
MD5

070707fef7398732ec01f46ea97271ca
SHA1

79c62f78ee92006d06b7930b4266c4eb4b17593c
SHA256

67feb111c5a984f5d5c48a65b925ea7af4918a5360a5f3caf2e975377991177c
SHA512

e698e8071448ef37ef26941166bccee5934f443f8f97da2cb9c824b978b1f754916c703be1cbc01b8a3faa9a7822e05ddc8237adea666877a34b15e536ece827

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

304 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

304 AcroRd32.exe
304 AcroRd32.exe
304 AcroRd32.exe
304 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67feb111c5a984f5d5c48a65b925ea7af4918a5360a5f3caf2e975377991177c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:304

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/304-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download