b7fba489539755a3fff1b93c05a1093b3379f55aa1c29e829a7701ebb7730f8f | Triage

Analysis

max time kernel
151s
max time network
51s
platform
windows7_x64
resource
win7-20220414-en
submitted
02-05-2022 21:27

Sharing

Report Analysis Logs

General

Target

b7fba489539755a3fff1b93c05a1093b3379f55aa1c29e829a7701ebb7730f8f.pdf
Size

17KB
MD5

c0ca787c74fa8bfec8cef8d5563779bd
SHA1

c2c8c9a71fd1f055695b319548ee919324f33a8e
SHA256

b7fba489539755a3fff1b93c05a1093b3379f55aa1c29e829a7701ebb7730f8f
SHA512

f36d3ffb126cd0899d41d4037e5adb2960e21110c7cc4a4f3dc5fd5e4b6aab5c6b14e772a81778f6bd0ff7f2fc773b0523571562a097dac5e12728eefcd40ece

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b7fba489539755a3fff1b93c05a1093b3379f55aa1c29e829a7701ebb7730f8f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2004

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-54-0x0000000075521000-0x0000000075523000-memory.dmp

Filesize
8KB

Download