0ad036d8a16bc1631976e2c876accfe3165eba5a03eafed309dc6d40bcc2caa2 | Triage

Analysis

max time kernel
156s
max time network
122s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:00

Sharing

Report Analysis Logs

General

Target

57489*9@7157*@785682318*@307854@7*39@623*4@72674@*2182*1303@38.pdf
Size

162KB
MD5

c787835879e384de03e809b78b34bfd1
SHA1

a2bb9a461d66e7dbfa480d52a883696bdec9a67c
SHA256

0ad036d8a16bc1631976e2c876accfe3165eba5a03eafed309dc6d40bcc2caa2
SHA512

73cca247c291f472a7fd1c6f236d95f5798bf896a2b3bc9507f6be2aa4850f2062ab57e5a3695889dfae3793e7056612516e353fa4e8843e63500efa02776b05

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1428 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1428 AcroRd32.exe
1428 AcroRd32.exe
1428 AcroRd32.exe
1428 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57489_9@7157_@785682318_@307854@7_39@623_4@72674@_2182_1303@38.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1428

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1428-54-0x0000000074C71000-0x0000000074C73000-memory.dmp

Filesize
8KB

Download