cc03af2dcd3c15408e8f89b75a32cc8aa14cbb398429c0eb6a9e29eab8d5ccd4 | Triage

Analysis

max time kernel
399s
max time network
419s
platform
windows7_x64
resource
win7-20220414-en
submitted
12-05-2022 14:28

Sharing

Report Analysis Logs

General

Target

ptrs009-03-12.pdf
Size

1.2MB
MD5

78d0224575569d6b977f960b0880db4e
SHA1

573a61df88ae79bf8793e0f50d466071d025543d
SHA256

cc03af2dcd3c15408e8f89b75a32cc8aa14cbb398429c0eb6a9e29eab8d5ccd4
SHA512

0dea4e3b132f4c79993d06298020afbb0ccfcfb8e14e2a31dd86e7ac96609bee20d35b046f95248e7313f2a3eb76f6b31f30aec60f263769d4c83576d9897c05

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1524 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1524 AcroRd32.exe
1524 AcroRd32.exe
1524 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ptrs009-03-12.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1524-54-0x00000000756E1000-0x00000000756E3000-memory.dmp

Filesize
8KB

Download