b2ecf33a13f1df3910b31690c7c84d91863954d6abfbc420a0fabbdb4c52477c | Triage

Analysis

max time kernel
151s
max time network
54s
platform
windows7_x64
resource
win7v20210408
submitted
14-10-2021 05:00

Sharing

Report Analysis Logs

General

Target

KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021101782.pdf
Size

185KB
MD5

316eafb361257b4238e3052f6a062453
SHA1

1746537cb450b11a4d7cc8e87470dfa4fdd03407
SHA256

b2ecf33a13f1df3910b31690c7c84d91863954d6abfbc420a0fabbdb4c52477c
SHA512

8a82a47cf272badeafaae68a6cc0b41a58b115c99e7608e7050c07f9607ad77f42b9e4acc9c8d19a1cf79aac0b33d1f677ad70be5176ed07a6c3f4228bc4f9ed

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2044 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2044 AcroRd32.exe
2044 AcroRd32.exe
2044 AcroRd32.exe
2044 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021101782.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2044

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2044-60-0x0000000075D11000-0x0000000075D13000-memory.dmp

Filesize
8KB

Download