62579a8ff0f27f7030224869bf916db3805606d4de7794e99feff3dbdc6b5c02 | Triage

Analysis

max time kernel
4294214s
max time network
133s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:40

Sharing

Report Analysis Logs

General

Target

62579a8ff0f27f7030224869bf916db3805606d4de7794e99feff3dbdc6b5c02.pdf
Size

50KB
MD5

daee8a6728e4a5d5b374b405370f4959
SHA1

41f240d1a58a1a63e7b66ff2cab80e3088c77658
SHA256

62579a8ff0f27f7030224869bf916db3805606d4de7794e99feff3dbdc6b5c02
SHA512

62bb2e9103d553acf263b974696cb868d465769482e1569fe7df690d1c92e9937e65dee4ff3cb162363dd5dce2644752ca80f5d8a4308fcabd81ee8fc71a593d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1452 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\62579a8ff0f27f7030224869bf916db3805606d4de7794e99feff3dbdc6b5c02.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1452

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1452-54-0x0000000075A31000-0x0000000075A33000-memory.dmp

Filesize
8KB

Download