4c2a9141d15dca53b18d036f57c22058f894397294c022fa083451e0733d5b79 | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
21-05-2022 10:30

Sharing

Report Analysis Logs

General

Target

4c2a9141d15dca53b18d036f57c22058f894397294c022fa083451e0733d5b79.pdf
Size

4.1MB
MD5

2107d5bc70104a08223e8d6df33cc8f6
SHA1

7719d5fa2895c9176921a4a0b3d07e3025a3e41d
SHA256

4c2a9141d15dca53b18d036f57c22058f894397294c022fa083451e0733d5b79
SHA512

bd5a269934f30ec93177d21134bfe4f1834ec613eb1150c54524c7550c5b17f5213f578be0c19b5fe81984ce093fc27560fbc55a5b0abe688d59dbb023ff1c32

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

988 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

988 AcroRd32.exe
988 AcroRd32.exe
988 AcroRd32.exe
988 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c2a9141d15dca53b18d036f57c22058f894397294c022fa083451e0733d5b79.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:988

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/988-54-0x0000000075C71000-0x0000000075C73000-memory.dmp

Filesize
8KB

Download