65994e0f3d5a2310c5b8f6a4213f7ed4cc2e7da2a3daa4439654065d895346e0 | Triage

Analysis

max time kernel
4294210s
max time network
124s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:26

Sharing

Report Analysis Logs

General

Target

65994e0f3d5a2310c5b8f6a4213f7ed4cc2e7da2a3daa4439654065d895346e0.pdf
Size

36KB
MD5

f96cf904117d7076f97716f296005272
SHA1

200c03c0f37103c32541732f399ce659c662ab97
SHA256

65994e0f3d5a2310c5b8f6a4213f7ed4cc2e7da2a3daa4439654065d895346e0
SHA512

b02ccc03de8a9d5d395d0b068c89b3e4ded421a40a1255ab97e4280675c39c2b771bdf8e94a455bf9f574bbd3ff923dac85d1e2771e22437e440896dc36a474d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1096 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1096 AcroRd32.exe
1096 AcroRd32.exe
1096 AcroRd32.exe
1096 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65994e0f3d5a2310c5b8f6a4213f7ed4cc2e7da2a3daa4439654065d895346e0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1096

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-54-0x0000000075EB1000-0x0000000075EB3000-memory.dmp

Filesize
8KB

Download