8ff2be2def02b1d77028eaa6589b33db53c6e229bde798c9015dc4a113c2faaa | Triage

Analysis

max time kernel
152s
max time network
135s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:04

Sharing

Report Analysis Logs

General

Target

KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021101307.pdf
Size

181KB
MD5

99a0bfe0deed6cace00c5efbd1ada58e
SHA1

f43c67cbcbbb0ffeb16b74144fc05760b6199674
SHA256

8ff2be2def02b1d77028eaa6589b33db53c6e229bde798c9015dc4a113c2faaa
SHA512

fc63c507bc2fa18f3a80980ab812b5a8055d3e41522e7bd19f1f379cf60ae352f8bee30102ed2a6a05be82781fdc133284bd14a69c9f33c5e58c4e764b1926e6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1368 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1368 AcroRd32.exe
1368 AcroRd32.exe
1368 AcroRd32.exe
1368 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021101307.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1368

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1368-54-0x00000000768C1000-0x00000000768C3000-memory.dmp

Filesize
8KB

Download