ad4e8c8612d092d11e80707f562a5ad86ca1ccb049837d2c20cdf696f01cb2a9 | Triage

Resubmissions

21-02-2021 18:55

210221-efpz8dh2q2 1

24-11-2020 02:17

201124-114v6258cn 10

24-11-2020 02:05

201124-hcjk9nn5ba 10

Analysis

max time kernel
101s
max time network
10s
platform
windows7_x64
resource
win7v20201028
submitted
21-02-2021 18:55

Sharing

Report Analysis Logs

General

Target

MX_Series_Installation_Instructions_BCN-P5968-B_(08.13).pdf
Size

210KB
MD5

14d0eece7311dfc25f6a47651404a059
SHA1

b902a9ea5fe894f34739e7934f8838cd12e8b39f
SHA256

ad4e8c8612d092d11e80707f562a5ad86ca1ccb049837d2c20cdf696f01cb2a9
SHA512

f8079aca749a399f5029d9685b34899e105c7e90a38f22d40ed5fc170420904abaccd3e91baef086191f51c978e9092b2d2f8516071b32a1acbf8454706a5f05

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1904 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1904 AcroRd32.exe
1904 AcroRd32.exe
1904 AcroRd32.exe
1904 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MX_Series_Installation_Instructions_BCN-P5968-B_(08.13).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1904

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1904-2-0x0000000075781000-0x0000000075783000-memory.dmp

Filesize
8KB

Download