9d70b56e9fdb6bc09ed61c55cc58f29730d3ab6545822f7c452ce973a95b959c | Triage

Analysis

max time kernel
154s
max time network
120s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:01

Sharing

Report Analysis Logs

General

Target

INVITATION_2021105911.pdf
Size

268KB
MD5

79935cfcd2953e43de3f68c2a57d2d7c
SHA1

93694340e29f27bd76a752a1c630a6ce36d9a077
SHA256

9d70b56e9fdb6bc09ed61c55cc58f29730d3ab6545822f7c452ce973a95b959c
SHA512

eb6465c07f1217e5feded59410d9a422a5a2b8607a073997f9efff7c0fb15576ad68a62a20e55c63422f3cbbb9a6e5a49d1d6fab7b8b5c61bb4523b6ad1af2bc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1268 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INVITATION_2021105911.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1268

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1268-54-0x00000000751A1000-0x00000000751A3000-memory.dmp

Filesize
8KB

Download