2c4c63ca9d443197612515e3b56ec5c1b232fabe30c0c5f17efceb8c9177ac42 | Triage

Resubmissions

31-03-2022 14:31

220331-rv7jysdcf4 3

31-03-2022 14:25

220331-rq95aahcfq 3

31-03-2022 13:14

220331-qg34yagdfn 3

31-03-2022 13:10

220331-qekjtacda9 3

Analysis

max time kernel
4294178s
max time network
123s
platform
windows7_x64
resource
win7-20220310-en
submitted
31-03-2022 14:25

Sharing

Report Analysis Logs

General

Target

Output_126896.pdf
Size

46KB
MD5

ddc23cf4adaefd80c724d3bdee101029
SHA1

9eba14c6c8549138749d0f71ca35ff1f1bbb327d
SHA256

2c4c63ca9d443197612515e3b56ec5c1b232fabe30c0c5f17efceb8c9177ac42
SHA512

7f3c17da8f1c48cb8d5618ae3ab9e37b6d61c8167eb45eb978f2c9a48db2963be1a78f5bb9801eb6eb941fae2680b53b57cf010de82c8cf8c1b7bd8eec759fcb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1464 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1464 AcroRd32.exe
1464 AcroRd32.exe
1464 AcroRd32.exe
1464 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Output_126896.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1464

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1464-54-0x0000000075AA1000-0x0000000075AA3000-memory.dmp

Filesize
8KB

Download