5bc737eeccdca2d84d269fe2f02c14e7fb261f679c4e11a162fcb17a82ddfacc | Triage

Analysis

max time kernel
150s
max time network
50s
platform
windows7_x64
resource
win7-20220414-en
submitted
12-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 120522.pdf
Size

342KB
MD5

6f008e0fd3acfe5894285e239d3465bb
SHA1

0641b73486b49573b2ad8b0c1a0d7ab0942f287b
SHA256

5bc737eeccdca2d84d269fe2f02c14e7fb261f679c4e11a162fcb17a82ddfacc
SHA512

854eca42f9c3c000b1165065dfb5e027a63f295ff319b4c01c2fba3bbb53c034c137cca87fce6e3badfa4bf8850a04a5bbc25372c87be808bd839a64d78617e8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1672 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1672 AcroRd32.exe
1672 AcroRd32.exe
1672 AcroRd32.exe
1672 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 120522.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1672

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-54-0x00000000763C1000-0x00000000763C3000-memory.dmp

Filesize
8KB

Download