011905d04ef3f84c88c75db396cd644e770d4d51f0ecca676b16e3af34dcf3e4 | Triage

Analysis

max time kernel
4294212s
max time network
122s
platform
windows7_x64
resource
win7-20220311-en
submitted
14-04-2022 13:15

Sharing

Report Analysis Logs

General

Target

INFORMACIÓN-converti.pdf
Size

128KB
MD5

649ad621248a825e19dd642c7dfc5bb3
SHA1

f590050f8b165cddd0e091b2cc1f621cf6c0925d
SHA256

011905d04ef3f84c88c75db396cd644e770d4d51f0ecca676b16e3af34dcf3e4
SHA512

20b97cb2231a75769346db7dbdfa52860766af432382114a4b7e0580c2717180902a72600d36a0ba483ad290d622b265527b5fd1bb9817455edd9484ab3b08d3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1560 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1560 AcroRd32.exe
1560 AcroRd32.exe
1560 AcroRd32.exe
1560 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INFORMACIÓN-converti.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1560

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-54-0x0000000075611000-0x0000000075613000-memory.dmp

Filesize
8KB

Download