1977ba3edefda91e72b00a6e7abd98c6653360ff495ba3fd536259f2dd4c1e37 | Triage

Analysis

max time kernel
4294222s
max time network
128s
platform
windows7_x64
resource
win7-20220310-en
submitted
14-04-2022 13:57

Sharing

Report Analysis Logs

General

Target

1977ba3edefda91e72b00a6e7abd98c6653360ff495ba3fd536259f2dd4c1e37.pdf
Size

193KB
MD5

710fbf3f851c10b49134afdb3935a6f4
SHA1

2f89e6057730d8be5466d8cf25a6bfb2e6689849
SHA256

1977ba3edefda91e72b00a6e7abd98c6653360ff495ba3fd536259f2dd4c1e37
SHA512

a0d5c1b272d96f2cf94435db0166818f234cb95e95f1c4daad34adfefff41facfa9e463844422d41daa6c61d583f76ac1716bab835aea9d0b3ed337f10785dd7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1740 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1740 AcroRd32.exe
1740 AcroRd32.exe
1740 AcroRd32.exe
1740 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1977ba3edefda91e72b00a6e7abd98c6653360ff495ba3fd536259f2dd4c1e37.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1740-54-0x0000000075691000-0x0000000075693000-memory.dmp

Filesize
8KB

Download