e42777720cbbbedfe9d4318082f75493acfae94b271b37e89bffd3074b3bb2ec | Triage

Resubmissions

29-03-2022 18:48

220329-xfwrsshha9 3

29-03-2022 18:38

220329-w97wgsdggp 8

Analysis

max time kernel
4294210s
max time network
120s
platform
windows7_x64
resource
win7-20220311-en
submitted
29-03-2022 18:48

Sharing

Report Analysis Logs

General

Target

New_Space_Application.pdf
Size

1.6MB
MD5

2118c4b278dcb298d9e16089e6571b97
SHA1

b626e330021de5c91f5017ac1c2f962bd4481ed3
SHA256

e42777720cbbbedfe9d4318082f75493acfae94b271b37e89bffd3074b3bb2ec
SHA512

eff2c15a13430a11ffedaf5a681548bb761f66d2c57d5b6c2a6da32e2d9a3db92c9f90295419fb828f074fbf02b620b8ec7b3b3104845d2ac4af02af5dc7a69b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1584 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1584 AcroRd32.exe
1584 AcroRd32.exe
1584 AcroRd32.exe
1584 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\New_Space_Application.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1584

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1584-54-0x0000000075841000-0x0000000075843000-memory.dmp

Filesize
8KB

Download