cb29eb9bf7a1fa4ea45b89617add4eee5fefa37e330e157721415406b713ba98 | Triage

Analysis

max time kernel
4294180s
max time network
128s
platform
windows7_x64
resource
win7-20220311-en
submitted
31-03-2022 04:54

Sharing

Report Analysis Logs

General

Target

A09 (1).pdf
Size

505KB
MD5

1f4a5c96a4407be44fd8cc2c404d5009
SHA1

0d4dd50c093c8bdb89a17319e4de7cd0bb18de9c
SHA256

e14cfdb7143e4c3f8aa7eeb39227bf35beee88735202e3e6e62b69bbbb5878b9
SHA512

8550d417aa20209a0ece09c15c7c124b1425c0d170ef7008779aa1f18fcfb88bc2126d49e444d369198326fca6a3ab203599ecf5024da04e192be22df4151877

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1880 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\A09 (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1880

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1880-54-0x00000000763D1000-0x00000000763D3000-memory.dmp

Filesize
8KB

Download