5632e5b318e8697da0bae6c891955da93df4e71b21ba9fac9f40b1515238ec27 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:16

Sharing

Report Analysis Logs

General

Target

attachment20220806-4314-1yqu7n7.pdf
Size

13KB
MD5

807b20cafcc48015dce101a39951be4d
SHA1

bd0dafa34f92b5b01cf90709d523b813899a3afa
SHA256

5632e5b318e8697da0bae6c891955da93df4e71b21ba9fac9f40b1515238ec27
SHA512

38e3e018d400b686ebd4335837274391c5499f8120d2b411b090a1ec7201b7ce749d40500f42c1e7a0c3c28a26984bddc5ea6b9421409e4652627f0382a86fa8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1804 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1804 AcroRd32.exe
1804 AcroRd32.exe
1804 AcroRd32.exe
1804 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-4314-1yqu7n7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1804-54-0x00000000763E1000-0x00000000763E3000-memory.dmp

Filesize
8KB

Download