280ff42f2664b423a40e20eb03ac4d8d730615b191795ec35d692ea9f31c4807 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:01

Sharing

Report Analysis Logs

General

Target

AND-LIVING_INVITATION_2021109476.pdf
Size

185KB
MD5

d4adcc2ff7fda7b6097dcb436960cfba
SHA1

4ed2bb0c04bea06ccd61577e398c1fe61272a2fe
SHA256

280ff42f2664b423a40e20eb03ac4d8d730615b191795ec35d692ea9f31c4807
SHA512

c732f2165b214c3810ce0762dbf57ec845a5e83e69f6f9262d67f89d01ae5e00b930bea48fe300b89bce08cf67582bdf9e5734c68a4a9727444370862c84f2d7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1092 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1092 AcroRd32.exe
1092 AcroRd32.exe
1092 AcroRd32.exe
1092 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_INVITATION_2021109476.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1092

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1092-54-0x0000000074B41000-0x0000000074B43000-memory.dmp

Filesize
8KB

Download