cb29eb9bf7a1fa4ea45b89617add4eee5fefa37e330e157721415406b713ba98 | Triage

Analysis

max time kernel
4294214s
max time network
127s
platform
windows7_x64
resource
win7-20220311-en
submitted
31-03-2022 04:54

Sharing

Report Analysis Logs

General

Target

BRS.pdf
Size

39KB
MD5

327e98928162506396e752716a5d6ae2
SHA1

af23d6ec98c10ac851df72e735c6b4c6f55954b0
SHA256

dab52288d91138653d36d48a388981085a24e9b173c0391208fb9b92673a7a73
SHA512

b9fdd743ec5395c1cfe2890dbc3199ca44d04909a4afdee9ad8102c20f588adf117978bee662d9732ea0c0b70c903ec12c28faa0e62dca5c53a60adfd86dffa4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\BRS.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-54-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download