f59982e6f66bd2aa628e2592f9afc5e3cf8fcbc8374ca55378dfc5faefbcc475 | Triage

Resubmissions

15-02-2023 08:43

230215-kmka5abb27 1

15-02-2023 08:42

230215-kl8bkaag4t 1

15-02-2023 08:39

230215-kkdqkaag3y 10

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
15-02-2023 08:39

Sharing

Report Analysis Logs

General

Target

Untitled Jam (7).pdf
Size

22KB
MD5

a520bcc98c6fcd69c4ab3944c0d5f4a2
SHA1

07529d8c678d08f436a6abdbf3f0237956b1baee
SHA256

f59982e6f66bd2aa628e2592f9afc5e3cf8fcbc8374ca55378dfc5faefbcc475
SHA512

76cc077a791292eb043101ed563ec238065513e84428ba6bfc37d342ee9171b33b15e993d13a95fb7ca4950cd9486d715a9ef0ef508afa8e2e145d5cab4f6400
SSDEEP

384:w7JWL/WC88erHxH+R8NkRSeTy/sYClAe92MQZMZmylqlo:KWLWC8Be66RcUHlAOQZWlqu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1704 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1704 AcroRd32.exe
1704 AcroRd32.exe
1704 AcroRd32.exe
1704 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Untitled Jam (7).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1704

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1704-54-0x0000000075831000-0x0000000075833000-memory.dmp

Filesize
8KB

Download