c25f23f580da80ffad62e13e6635a1e7fa2078756d15d9ddbced4fa34fcd329d | Triage

Analysis

max time kernel
150s
max time network
51s
platform
windows7_x64
resource
win7-20220414-en
submitted
03-05-2022 00:31

Sharing

Report Analysis Logs

General

Target

c25f23f580da80ffad62e13e6635a1e7fa2078756d15d9ddbced4fa34fcd329d.pdf
Size

36KB
MD5

3468076f6a0ef3c64dd96039a55b41f4
SHA1

3f926d336dd7f162ad4295763a1dd0661ddad2a4
SHA256

c25f23f580da80ffad62e13e6635a1e7fa2078756d15d9ddbced4fa34fcd329d
SHA512

e6ed7f3bc74908f57b76a6fdb7e270d9334620fc820fed1225c9d3416f5b875b4ce2e3447c7ca5b3b3e1ca83e25561281f3f15507c9d3877f5e95a50ee951616

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c25f23f580da80ffad62e13e6635a1e7fa2078756d15d9ddbced4fa34fcd329d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2036

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2036-54-0x0000000075521000-0x0000000075523000-memory.dmp

Filesize
8KB

Download