cb29eb9bf7a1fa4ea45b89617add4eee5fefa37e330e157721415406b713ba98 | Triage

Analysis

max time kernel
4294212s
max time network
125s
platform
windows7_x64
resource
win7-20220310-en
submitted
31-03-2022 04:54

Sharing

Report Analysis Logs

General

Target

DOC.pdf
Size

708KB
MD5

dec332e5d89b688e0fbad03d48999a7e
SHA1

5a229884998ffdfd0af8681be12d6726e2c2e568
SHA256

9cfafc0df8156b2c1b872af78f9230e756ff8c2b92bb7f93f3809a681bfaf5c3
SHA512

76786cecdcc434ba714b18b3c8c00ac037cf92a92d80a219557aa70fef43b5abfb80c7dc199475e54107731a52dd4a7a43c4a9d86afdc107941ed4017c612cb2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DOC.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-54-0x0000000076141000-0x0000000076143000-memory.dmp

Filesize
8KB

Download