66a085034c40e4561051649b795fcdccbc4dcba177f068e96e5bed7646e49505 | Triage

Analysis

max time kernel
4294212s
max time network
124s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:25

Sharing

Report Analysis Logs

General

Target

66a085034c40e4561051649b795fcdccbc4dcba177f068e96e5bed7646e49505.pdf
Size

53KB
MD5

bc9b54bcc7cb4123f4c59af144fcfeb9
SHA1

a10b0c79345229bace9656f258542773810570ec
SHA256

66a085034c40e4561051649b795fcdccbc4dcba177f068e96e5bed7646e49505
SHA512

3dff1582a4d433df9d11f288e6bcacbe8edd9c729331317c9fdce71cd1c5bb37cf01d010582afc5cbbbe127497fdf3700c1878845d2fb8018cf88e7ff6e493e0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1380 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1380 AcroRd32.exe
1380 AcroRd32.exe
1380 AcroRd32.exe
1380 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66a085034c40e4561051649b795fcdccbc4dcba177f068e96e5bed7646e49505.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1380-54-0x0000000076071000-0x0000000076073000-memory.dmp

Filesize
8KB

Download