a544b4050677d9e5ad964398954cf7d74c96b65a1126a8bb3491fbe52ff0ec10 | Triage

Analysis

max time kernel
151s
max time network
152s
platform
windows7_x64
resource
win7v20210408
submitted
27-07-2021 09:08

Sharing

Report Analysis Logs

General

Target

27-07-2021/27-07-2021/Remittance Copy 22-07-21.pdf
Size

22KB
MD5

aeafd0bee485a843ee4210ed01358720
SHA1

882368e6f101ad0f25264d6e437cb79c3d736ede
SHA256

e1665fd25b191c4151e161d52a2b8900d0786e06d684188f457041551bb5581d
SHA512

9d50892b4780f4bcebb556181391bc0fffdbe12b4325331f9d9f22c693012ce821d071573a74f9ea0bc708c154b9465f316168c7ef2c3ecd86b6be39bc95f915

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1348 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1348 AcroRd32.exe
1348 AcroRd32.exe
1348 AcroRd32.exe
1348 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27-07-2021\27-07-2021\Remittance Copy 22-07-21.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1348

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1348-60-0x00000000762C1000-0x00000000762C3000-memory.dmp

Filesize
8KB

Download