f13268fdf83172b83296dfa3f4f7be182f013930272058b79357101e271a2ba7 | Triage

Analysis

max time kernel
4294199s
max time network
125s
platform
windows7_x64
resource
win7-20220311-en
submitted
13-04-2022 16:15

Sharing

Report Analysis Logs

General

Target

s03s49y8vo1..pdf
Size

321KB
MD5

7912cd794278614364054b0f01ef91c4
SHA1

535fe601d78d81631c86becb131bc9661dc987d2
SHA256

f13268fdf83172b83296dfa3f4f7be182f013930272058b79357101e271a2ba7
SHA512

234cb7d80cacbaf2086faf2b5df9e1c597d4faa0e4ecafe8efd2957beaca30a782ad39e72925e69091e1f448637c48bda5a02b73c41c96aac9f2578922a63b98

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1836 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1836 AcroRd32.exe
1836 AcroRd32.exe
1836 AcroRd32.exe
1836 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\s03s49y8vo1..pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1836

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1836-54-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download