695790c2bfcb2ba1b70183c780d6fbd23c533de3176ad7f30f3926aec7f0855c | Triage

Analysis

max time kernel
4294215s
max time network
133s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:22

Sharing

Report Analysis Logs

General

Target

695790c2bfcb2ba1b70183c780d6fbd23c533de3176ad7f30f3926aec7f0855c.pdf
Size

58KB
MD5

548f7254b9df486f2abdd069f2e69118
SHA1

2de9cf5e8debb226e198c361fefb5dc8eced27bb
SHA256

695790c2bfcb2ba1b70183c780d6fbd23c533de3176ad7f30f3926aec7f0855c
SHA512

14b7acd71d8c504138b73e8840c5c8b95d51e06a177a0c09fce7bb98ac84d4ee3f026d4240a2a68e3a66467f7665379076b91a50bc1c229802ec25ba072110d1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1604 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1604 AcroRd32.exe
1604 AcroRd32.exe
1604 AcroRd32.exe
1604 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\695790c2bfcb2ba1b70183c780d6fbd23c533de3176ad7f30f3926aec7f0855c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1604

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1604-54-0x00000000753C1000-0x00000000753C3000-memory.dmp

Filesize
8KB

Download