19d156d205df792a4a8c881b2201c561c9f74babc40cdb8ecd7f55d68f3c135b | Triage

Analysis

max time kernel
4294224s
max time network
135s
platform
windows7_x64
resource
win7-20220310-en
submitted
14-04-2022 13:58

Sharing

Report Analysis Logs

General

Target

ExeFilter-1.1.2-alpha3/ExeFilter_documentation_FR.pdf
Size

193KB
MD5

710fbf3f851c10b49134afdb3935a6f4
SHA1

2f89e6057730d8be5466d8cf25a6bfb2e6689849
SHA256

1977ba3edefda91e72b00a6e7abd98c6653360ff495ba3fd536259f2dd4c1e37
SHA512

a0d5c1b272d96f2cf94435db0166818f234cb95e95f1c4daad34adfefff41facfa9e463844422d41daa6c61d583f76ac1716bab835aea9d0b3ed337f10785dd7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

952 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

952 AcroRd32.exe
952 AcroRd32.exe
952 AcroRd32.exe
952 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ExeFilter-1.1.2-alpha3\ExeFilter_documentation_FR.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:952

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/952-54-0x00000000766A1000-0x00000000766A3000-memory.dmp

Filesize
8KB

Download