17093966b26f7d88ac9039101ef1287f036db98343369e94f0e7a70fa5a6fdb3 | Triage

Analysis

max time kernel
1618s
max time network
1621s
platform
windows7_x64
resource
win7-20220331-en
submitted
10-04-2022 09:34

Sharing

Report Analysis Logs

General

Target

17093966b26f7d88ac9039101ef1287f036db98343369e94f0e7a70fa5a6fdb3.pdf
Size

1.4MB
MD5

73c435d8acdafd9a05df2a5f65db6916
SHA1

f4ff43d7467aa45287fa9d9f62a830e6d2f1650a
SHA256

17093966b26f7d88ac9039101ef1287f036db98343369e94f0e7a70fa5a6fdb3
SHA512

c2cb0ea49ece0ec7b75b67847291991cd54d03cd36afbe6f2523c072d3386ebb554d3c92a4bb752d385b811b4db804a5455c9979243697e2412c1fc31a16d5bc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1820 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17093966b26f7d88ac9039101ef1287f036db98343369e94f0e7a70fa5a6fdb3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1820

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1820-54-0x0000000076641000-0x0000000076643000-memory.dmp

Filesize
8KB

Download