bc9a01638f5c0c2159402f436d6bc118551fb65935bb1d499ff2cbdf7e1f0659 | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
04-05-2022 20:43

Sharing

Report Analysis Logs

General

Target

West-Texas-TV-Stations.pdf
Size

391KB
MD5

5a225e52bcc21ea9270bc849ed0dcd6c
SHA1

b992482690435464198816ceee22965a3ee07f24
SHA256

bc9a01638f5c0c2159402f436d6bc118551fb65935bb1d499ff2cbdf7e1f0659
SHA512

46846a2e554ce1c173d901fcf916bdfc6989795f0827dda09f00687339049b519cf3d9152ba9a3ea18968269fa04dd1aa5b625856415878c5da9bec94204b60d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1660 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1660 AcroRd32.exe
1660 AcroRd32.exe
1660 AcroRd32.exe
1660 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\West-Texas-TV-Stations.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1660-54-0x00000000753C1000-0x00000000753C3000-memory.dmp

Filesize
8KB

Download