ecf1475f7c8505699039f4c05e0ee30287be0a98e156ec284dca8b45f971e497 | Triage

Analysis

max time kernel
120s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
10-01-2023 02:32

Sharing

Report Analysis Logs

General

Target

2800145237.pdf
Size

19KB
MD5

765a34f3dec45c74666c2eadfb289d2a
SHA1

16995d2996b87afba5fbed572af8624c37b57f94
SHA256

ecf1475f7c8505699039f4c05e0ee30287be0a98e156ec284dca8b45f971e497
SHA512

973d0bd73a9c537630a73d34611b9397a629eb73f552a2b37db67b410426a3ca10d2213d5648485cf5c900dc2f06574a4f7b5a0df9c0f25234ace18ba9e42c4b
SSDEEP

384:fbzCwKbJoUEZa0kq4RPxAbUgLAAToKqkStBN+osiUoIFt/MI:vIoDDkzZAbU6AAToMStbImMt7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
852	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
852	AcroRd32.exe
852	AcroRd32.exe
852	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2800145237.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/852-54-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

Filesize
8KB

Download