3c1b4cada24bbfaeeefe532af2e120b128827fdb1cb65360d1f766a602acb9bc | Triage

Analysis

max time kernel
151s
max time network
118s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:04

Sharing

Report Analysis Logs

General

Target

NEW_COLLECTIONS_2021103296.pdf
Size

254KB
MD5

7b8ff9b4e789b362aba46baf3319659f
SHA1

c0178377d0b865eb27a05b24cf6ed5653908cf46
SHA256

3c1b4cada24bbfaeeefe532af2e120b128827fdb1cb65360d1f766a602acb9bc
SHA512

f01fbb0a837749628f7c700bde03bac02bb73058bebd2268f8bdcac11c24ffba060dc43fcec0852632817a644a653daef731dda940c5bcc135e37326862eb303

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1144 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1144 AcroRd32.exe
1144 AcroRd32.exe
1144 AcroRd32.exe
1144 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_COLLECTIONS_2021103296.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1144

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1144-53-0x0000000076581000-0x0000000076583000-memory.dmp

Filesize
8KB

Download