a99f7f2c9b13bb0ac63e28ac23e197c660b2312da9974100ab9ae28f9bedf2a5 | Triage

Analysis

max time kernel
150s
max time network
49s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 07:07

Sharing

Report Analysis Logs

General

Target

a99f7f2c9b13bb0ac63e28ac23e197c660b2312da9974100ab9ae28f9bedf2a5.pdf
Size

377KB
MD5

d39bf7a2f66c833b50741e980e428f1e
SHA1

ca4da1e98fec2cccceceb5477aa62d2cc19e3488
SHA256

a99f7f2c9b13bb0ac63e28ac23e197c660b2312da9974100ab9ae28f9bedf2a5
SHA512

cdb4b985ccd9a718d2e0fabe7b5096948bf4aabb13cb2f2e3e2b0a16941a5f0de9d64e01198fe8a8db2e079875370e1bf67bff8889be73c8c98da159462b43a0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a99f7f2c9b13bb0ac63e28ac23e197c660b2312da9974100ab9ae28f9bedf2a5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1600

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-54-0x0000000075CD1000-0x0000000075CD3000-memory.dmp

Filesize
8KB

Download