bc83672f33ded0f0e42904f98eabc01cb496ec8377a79a250ce7eca5f11c47aa | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
23-05-2022 19:23

Sharing

Report Analysis Logs

General

Target

City Status Bid Warrington 07.12.21.pdf
Size

8.0MB
MD5

58f5b1a222169268f8912bd60b8641af
SHA1

2fcbb7d5cf4036323627147be41cfdcf5cb8c9df
SHA256

bc83672f33ded0f0e42904f98eabc01cb496ec8377a79a250ce7eca5f11c47aa
SHA512

4fc6175d763e811ce6e9fd56aaa3b0c5d339b0dc7f7d32305530b108a12f8fc3b43d1a6657426de3e3d94b61fcf781175c877b41bb826c6d47290dfec9f67a42

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1100 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1100 AcroRd32.exe
1100 AcroRd32.exe
1100 AcroRd32.exe
1100 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\City Status Bid Warrington 07.12.21.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1100

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1100-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

Filesize
8KB

Download