cfaf0a949a71ada54af11b81354abb914a0bc8500de9836cb568b011abda1e6b | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
21-10-2022 16:05

Sharing

Report Analysis Logs

General

Target

3簡章附表/2報名表-A4正表.pdf
Size

269KB
MD5

d5f5c4fa605fbfda9eb0046b5bf67be5
SHA1

99aa7cea6b487618b76a26134670220bc10af915
SHA256

2afabd76b918d1ea8abfc9b39bb43fafc6d95d397435ac9d039327885dc4995b
SHA512

75f2c354c2c55afece4c8f4fcb675bbc34c48efd3ddebde55e1b91a488dfa32fc5d546a0993f6d601f5df5377172faeb6b84a47cdb8f9096f06d81cc42418cb4
SSDEEP

6144:hdHnr3zuf0SgBFGX50g2JDJmNQCMPuq8pY4:XHrjDSoFGdNvUXgY4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2028 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2028 AcroRd32.exe
2028 AcroRd32.exe
2028 AcroRd32.exe
2028 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3簡章附表\2報名表-A4正表.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2028

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2028-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download