e6793cfeaf3fd5b9f82627eb61637bd99d2b99a2c5b2321a462ca853551e37bc | Triage

Analysis

max time kernel
4294214s
max time network
119s
platform
windows7_x64
resource
win7-20220310-en
submitted
14-04-2022 08:21

Sharing

Report Analysis Logs

General

Target

1.pdf
Size

31KB
MD5

e03e4d91d8cddee5e2ee657441a4bba4
SHA1

418a879cc033ac2af7e9a08ca974656cce2f78af
SHA256

e6793cfeaf3fd5b9f82627eb61637bd99d2b99a2c5b2321a462ca853551e37bc
SHA512

15f23b471eac6965abd89250a40caab98538c4044f4472e6e85aa00f024eedf237f521faabfbf742a28465bc7b8528321f43b689614e5db7fbd04209a4242944

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1824 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1824 AcroRd32.exe
1824 AcroRd32.exe
1824 AcroRd32.exe
1824 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1824

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1824-54-0x00000000759C1000-0x00000000759C3000-memory.dmp

Filesize
8KB

Download