80da7ae5c7a87ba389ebe327ed3f18a1471487d3c4133e8492ae00c8f52143f8 | Triage

Analysis

max time kernel
150s
max time network
49s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 200522.pdf
Size

344KB
MD5

b171a9131f3d08f5e8686787c0c67c7c
SHA1

56e787ec223c2b13efb525d025077e6346e85b40
SHA256

80da7ae5c7a87ba389ebe327ed3f18a1471487d3c4133e8492ae00c8f52143f8
SHA512

85ecbf05b0b4d9c4ac9d2c23b0e08ed7c0d94c9197da010257cefd344df8805f2236cee8c4a13d1e8e89be8e2c19e38bcda56dd374a8df16131f6345c0771ec7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

872 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

872 AcroRd32.exe
872 AcroRd32.exe
872 AcroRd32.exe
872 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 200522.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:872

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/872-54-0x00000000768D1000-0x00000000768D3000-memory.dmp

Filesize
8KB

Download