59ac1a8a6fe2dcd115e374e28a29deacb69a1dbb0ed1be88dec779df71e14cf9 | Triage

Analysis

max time kernel
150s
max time network
39s
platform
windows7_x64
resource
win7-20220414-en
submitted
03-05-2022 23:27

Sharing

Report Analysis Logs

General

Target

europeam-emf-guidelines-2016-ehs.pdf
Size

732KB
MD5

db6f1486009d83ef48c9ab8b72dd2fa9
SHA1

6dd77684c4078ac895230c2a341b5d21ff9484f2
SHA256

59ac1a8a6fe2dcd115e374e28a29deacb69a1dbb0ed1be88dec779df71e14cf9
SHA512

e8ee319d2168cf842ccf1c6374467bb7219efbe04bec90be801bf0c0c9ca1fcf5cd6c0c64cef09a92d2b7a284a9051d31a788f4be900eca8a793f43d59dc2e53

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1620 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1620 AcroRd32.exe
1620 AcroRd32.exe
1620 AcroRd32.exe
1620 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\europeam-emf-guidelines-2016-ehs.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1620

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1620-54-0x0000000075951000-0x0000000075953000-memory.dmp

Filesize
8KB

Download