ba8167018f1913c125ad5bb70671b5d56c7c763e479fc73fdcf3c2375aca6cdf | Triage

Analysis

max time kernel
4294210s
max time network
120s
platform
windows7_x64
resource
win7-20220311-en
submitted
14-04-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 140422.pdf
Size

282KB
MD5

4320c7249630da2dba3c08092316b18f
SHA1

a94862e866af42edbcca5f81b89c5e141a9b52ac
SHA256

ba8167018f1913c125ad5bb70671b5d56c7c763e479fc73fdcf3c2375aca6cdf
SHA512

7be89e342659510e6af875da2c9ddb51b0e92c6c17e8d6ee410f82fe395c214d8c48fb9ffd96ffd66a48347d0d09d8e86c875c49f93a5445e14a27d94c835111

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
1924 AcroRd32.exe
1924 AcroRd32.exe
1924 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 140422.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1924-54-0x0000000074F31000-0x0000000074F33000-memory.dmp

Filesize
8KB

Download