13aa4ea618726ad5cdbd48b34ba2ce57d1668bb81950e21d8800bb44f0747529 | Triage

Analysis

max time kernel
153s
max time network
120s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:04

Sharing

Report Analysis Logs

General

Target

AND-LIVING_COMPANY_2021105464.pdf
Size

225KB
MD5

7803408142731400975ecb494600fec6
SHA1

a10368c37371ab53ec18c2388e03238d45bd4992
SHA256

13aa4ea618726ad5cdbd48b34ba2ce57d1668bb81950e21d8800bb44f0747529
SHA512

d59d0016d9a68aa500b6af001ecba8336b04c6b85046ee4278429b5f9b9b4b70f2c98bf31db16a8395679f2882fe2982f4cc6e650e728a9c273343e196c045bc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1544 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1544 AcroRd32.exe
1544 AcroRd32.exe
1544 AcroRd32.exe
1544 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_COMPANY_2021105464.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1544

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1544-53-0x00000000751D1000-0x00000000751D3000-memory.dmp

Filesize
8KB

Download