62876ec7cb8bac33ea90a737aefdddcb83a9e90819ec6c96d05e6db225754c04 | Triage

Analysis

max time kernel
4294210s
max time network
136s
platform
windows7_x64
resource
win7-20220311-en
submitted
24-03-2022 22:40

Sharing

Report Analysis Logs

General

Target

62876ec7cb8bac33ea90a737aefdddcb83a9e90819ec6c96d05e6db225754c04.pdf
Size

43KB
MD5

f9e64f1c3e5b07c4dfd6a60fd0782880
SHA1

c12e6166728f1bd11b62dbfda9a159453c6de7fe
SHA256

62876ec7cb8bac33ea90a737aefdddcb83a9e90819ec6c96d05e6db225754c04
SHA512

1842a9ee295be25dbeb431e06ee6ed215041c979420313d715f6aa2ccf60b21243c2c18187afde9df1d2b4ca7034a4444251ef469f91cddbbc7d60cf30f6cdd7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1148 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1148 AcroRd32.exe
1148 AcroRd32.exe
1148 AcroRd32.exe
1148 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\62876ec7cb8bac33ea90a737aefdddcb83a9e90819ec6c96d05e6db225754c04.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1148-54-0x0000000075AD1000-0x0000000075AD3000-memory.dmp

Filesize
8KB

Download