cb29eb9bf7a1fa4ea45b89617add4eee5fefa37e330e157721415406b713ba98 | Triage

Analysis

max time kernel
4294229s
max time network
129s
platform
windows7_x64
resource
win7-20220311-en
submitted
31-03-2022 04:57

Sharing

Report Analysis Logs

General

Target

E id (1).pdf
Size

216KB
MD5

31fd24200f7b0308b691b8d3667c5d8e
SHA1

132cbff5aa0193a5cafad43bf7d8c0b054012f09
SHA256

e4e384ad25dec56f1eac535994a89a27e95b5173256d085b7f819c0ba3169f8f
SHA512

4cef73cb8b01b9e451422464d0bd4d87b4eb75c423074434472047758ef9fe987f023bb73db4c4867de6f1cfa406bba315e5a448aaece08e93c423b20f749292

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
1948 AcroRd32.exe
1948 AcroRd32.exe
1948 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\E id (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-54-0x0000000076BC1000-0x0000000076BC3000-memory.dmp

Filesize
8KB

Download