66da64babfb374c75775916da4280dc95c8570841c2a292f9102e8a193f92270 | Triage

Analysis

max time kernel
4294210s
max time network
122s
platform
windows7_x64
resource
win7-20220311-en
submitted
12-04-2022 08:39

Sharing

Report Analysis Logs

General

Target

66da64babfb374c75775916da4280dc95c8570841c2a292f9102e8a193f92270.pdf
Size

80KB
MD5

960c329c14af06cdfd51daee9b718939
SHA1

61f9356483444a77ef5e191b9b8bf5df5b4e287c
SHA256

66da64babfb374c75775916da4280dc95c8570841c2a292f9102e8a193f92270
SHA512

45736414b1bbd72e34fce6928f04766a04415c84439c5a8b1dccac0a10e19643dedbb9cee846d77014f6492097c1468b7d82221b7f057764db74ac96aa671f2f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1752 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1752 AcroRd32.exe
1752 AcroRd32.exe
1752 AcroRd32.exe
1752 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66da64babfb374c75775916da4280dc95c8570841c2a292f9102e8a193f92270.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1752

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1752-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download