BRIEF.pdf

General
Target

BRIEF.pdf

Filesize

238KB

Completed

14-10-2021 05:05

Score
1/10
MD5

d9eb117180673e30f6e56350ec72de59

SHA1

78392960cc53f8df04ffe856b271662ad2a89e00

SHA256

8a5fb3b82134ca2b6e924355ff8673dca2d15cbc765fd5744a9a99df7b0a9b79

Malware Config
Signatures 2

Filter: none

  • Suspicious behavior: GetForegroundWindowSpam
    AcroRd32.exe

    Reported IOCs

    pidprocess
    1984AcroRd32.exe
  • Suspicious use of SetWindowsHookEx
    AcroRd32.exe

    Reported IOCs

    pidprocess
    1984AcroRd32.exe
    1984AcroRd32.exe
    1984AcroRd32.exe
    1984AcroRd32.exe
Processes 1
  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\BRIEF.pdf"
    Suspicious behavior: GetForegroundWindowSpam
    Suspicious use of SetWindowsHookEx
    PID:1984
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • memory/1984-54-0x0000000075C11000-0x0000000075C13000-memory.dmp