4e391f6288ee119660df3a6dcd7c817673ad59b31f5123c24477b4edc16b2508 | Triage

Analysis

max time kernel
1613s
max time network
1633s
platform
windows7_x64
resource
win7-20220331-en
submitted
07-04-2022 11:34

Sharing

Report Analysis Logs

General

Target

masterCONFIGURATOR_v2.16.0.1407/Release_Note_masterCONFIGURATOR V2.16.0.1407.pdf
Size

172KB
MD5

06bed4aafb76643794f4006506b46ea8
SHA1

190c76f62b8308102c0d01e1671fb9984998a190
SHA256

bab2c72d3a27165677bdf7ee45baa5055d2c046a60514113f312f055e895bcc7
SHA512

bbb563ec2f64a940997589aec7ccda1d298ec74d2cc075ab9372d111ac6fbf59d19867f2e5f1bedea3d9cf19351212d252611f531e4f46e60f9795dc24ea750e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1088 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1088 AcroRd32.exe
1088 AcroRd32.exe
1088 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\masterCONFIGURATOR_v2.16.0.1407\Release_Note_masterCONFIGURATOR V2.16.0.1407.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1088

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1088-54-0x0000000075D11000-0x0000000075D13000-memory.dmp

Filesize
8KB

Download