6616aaa3dda3a15f67b8e69ac0c13a7e856bb65096ff70d26933163da5f11134 | Triage

Resubmissions

17-10-2022 17:37

221017-v7kgqscdh7 3

17-10-2022 15:50

221017-taedsacce6 3

17-10-2022 15:44

221017-s6t9faceap 3

Analysis

max time kernel
430s
max time network
432s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
17-10-2022 15:50

Sharing

Report Analysis Logs

General

Target

K032524542.pdf
Size

59KB
MD5

9747c2d120c639d6dbf4d65b6a4bfab8
SHA1

5c8bf5257ae110a8e1a8c0fa26cc3270a298d7ae
SHA256

6616aaa3dda3a15f67b8e69ac0c13a7e856bb65096ff70d26933163da5f11134
SHA512

8141a24bf951ce8d69985e49780fd779098577196ff7bcad2f0bb0250397dc8af74723f4a592988cea34f06507be0072cfff12c12eaede988fdcd3d6f8dc94e5
SSDEEP

1536:ojRPxkwTu/Q8MKPBMHcywOKPWgokPQUCcChzn:4BN8MWMH41Ppoz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\K032524542.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x0000000076171000-0x0000000076173000-memory.dmp

Filesize
8KB

Download