e1d6f04061c3d7ec8dd237bc6985eaaf6e76e032ecc45dd1daa4d67c69c8234f | Triage

Analysis

max time kernel
173s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
26-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 260522.pdf
Size

346KB
MD5

a049e0b98b2ba0b45c4a59a05ce020bb
SHA1

bcee53c2ac45c5bf598accc7e1bf546a237b851f
SHA256

e1d6f04061c3d7ec8dd237bc6985eaaf6e76e032ecc45dd1daa4d67c69c8234f
SHA512

57a7262b3daf5a27ef01780ed00650748142a6b6658f73d112477342d518d4d9549a6c2ba4548a54888766174ebc8ede6731a3f3c085fb4452269005e042c3c9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

916 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

916 AcroRd32.exe
916 AcroRd32.exe
916 AcroRd32.exe
916 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 260522.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:916

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/916-54-0x0000000075C71000-0x0000000075C73000-memory.dmp

Filesize
8KB

Download