85a97ddd5f404a4447ed5754d086f317c41f5308393f17f77bb7daa2a348c09f | Triage

Analysis

max time kernel
4294230s
max time network
132s
platform
windows7_x64
resource
win7-20220311-en
submitted
25-03-2022 12:47

Sharing

Report Analysis Logs

General

Target

85a97ddd5f404a4447ed5754d086f317c41f5308393f17f77bb7daa2a348c09f.pdf
Size

32KB
MD5

9423e4ad149ce2510a33074e3eab6bf2
SHA1

85cffc0977b035656b04914789f5f6ea0fc86f42
SHA256

85a97ddd5f404a4447ed5754d086f317c41f5308393f17f77bb7daa2a348c09f
SHA512

bf529dc11ff79772caaa62c9e7c2b2ae4302688502543dab186c5a60fb81c969fdb74c8c120fc8f3f3e986f6e8321e5f697295eab2d65641bb852d99903b5c53

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1800 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1800 AcroRd32.exe
1800 AcroRd32.exe
1800 AcroRd32.exe
1800 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\85a97ddd5f404a4447ed5754d086f317c41f5308393f17f77bb7daa2a348c09f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1800

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1800-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download