09cab95f8f2b02d49a505c2a3d6c6f18219103784affdb86ca5a5200ad90f946 | Triage

Analysis

max time kernel
4294238s
max time network
140s
platform
windows7_x64
resource
win7-20220311-en
submitted
25-03-2022 12:49

Sharing

Report Analysis Logs

General

Target

09cab95f8f2b02d49a505c2a3d6c6f18219103784affdb86ca5a5200ad90f946.pdf
Size

44KB
MD5

3ccf9a34bcac7bc1a6b56048dfb66f4f
SHA1

a43a263d6d3224c6e176d1d1dbe219acaecaca1f
SHA256

09cab95f8f2b02d49a505c2a3d6c6f18219103784affdb86ca5a5200ad90f946
SHA512

449f0cae4373dac21d037d9a5beb208f150df2758a3e1b9c5616cf2e7b699831d92293140b4c67edaca2ea31967f2a174d1e47cc4adfc89ad606b8ca7b8cb7dc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

756 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

756 AcroRd32.exe
756 AcroRd32.exe
756 AcroRd32.exe
756 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09cab95f8f2b02d49a505c2a3d6c6f18219103784affdb86ca5a5200ad90f946.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/756-54-0x0000000075C41000-0x0000000075C43000-memory.dmp

Filesize
8KB

Download