06e195bd20128d99236c81b15d893ef0df1cd9e5373f16311563264a79dd47fb | Triage

Analysis

max time kernel
153s
max time network
50s
platform
windows7_x64
resource
win7v20210408
submitted
14-10-2021 05:04

Sharing

Report Analysis Logs

General

Target

AND-LIVING_COMPANY_2021107144.pdf
Size

268KB
MD5

06a996f44d4c2965b6e3687d5039783a
SHA1

f22acd657406d280c103b7091118fc96b893d5fe
SHA256

06e195bd20128d99236c81b15d893ef0df1cd9e5373f16311563264a79dd47fb
SHA512

ccf1ddc9f75739a78616bab0b0cd992bd243af5a188548a48d0c6edc82da8367cce0e05492d098bb9fc095e2978e1965e37a223820f62716c5f9729175835a07

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
1948 AcroRd32.exe
1948 AcroRd32.exe
1948 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_COMPANY_2021107144.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-60-0x00000000767B1000-0x00000000767B3000-memory.dmp

Filesize
8KB

Download