65e3f3f86e3c74e92ac47452ec41f542e2a5f0f7672a8386223846193818dcea | Triage

Analysis

max time kernel
4294211s
max time network
125s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:25

Sharing

Report Analysis Logs

General

Target

65e3f3f86e3c74e92ac47452ec41f542e2a5f0f7672a8386223846193818dcea.pdf
Size

43KB
MD5

ac8eed14e8680eee8f47f8c7b66a08a7
SHA1

394a8a9504ebe2d577f3e5cb2e42b8563af05570
SHA256

65e3f3f86e3c74e92ac47452ec41f542e2a5f0f7672a8386223846193818dcea
SHA512

747235b30ff228684e1aa7aded23add77165335efb2f73bd33115b399801d134a3c546908285d5ac67a93fe1c7f4b356b73f127b70766445d844063a53048120

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2000 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2000 AcroRd32.exe
2000 AcroRd32.exe
2000 AcroRd32.exe
2000 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65e3f3f86e3c74e92ac47452ec41f542e2a5f0f7672a8386223846193818dcea.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2000

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-54-0x0000000074C61000-0x0000000074C63000-memory.dmp

Filesize
8KB

Download