65ff97c752b8343d0bc9663b4cd05d3f017ff199a40c12c7461f5fc2eb0aeb37 | Triage

Analysis

max time kernel
4294210s
max time network
124s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:25

Sharing

Report Analysis Logs

General

Target

65ff97c752b8343d0bc9663b4cd05d3f017ff199a40c12c7461f5fc2eb0aeb37.pdf
Size

43KB
MD5

013e4bd1ad2cd9790a2be8e240754439
SHA1

acf568e2a87bf1e8e89b4a4590fe3d1eb2569eaf
SHA256

65ff97c752b8343d0bc9663b4cd05d3f017ff199a40c12c7461f5fc2eb0aeb37
SHA512

de6193c8df0d92b80100b234aa5caa612bacf9655f72ac9492c7a17caacfb8ad775cbd95811bac84ff743fe2158cbfa873550e9b44694bcd108d04f4fca0dd20

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
1924 AcroRd32.exe
1924 AcroRd32.exe
1924 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65ff97c752b8343d0bc9663b4cd05d3f017ff199a40c12c7461f5fc2eb0aeb37.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1924-54-0x00000000763D1000-0x00000000763D3000-memory.dmp

Filesize
8KB

Download