INVITATION_2021105911.pdf

General
Target

INVITATION_2021105911.pdf

Filesize

268KB

Completed

14-10-2021 05:11

Score
1 /10
MD5

79935cfcd2953e43de3f68c2a57d2d7c

SHA1

93694340e29f27bd76a752a1c630a6ce36d9a077

SHA256

9d70b56e9fdb6bc09ed61c55cc58f29730d3ab6545822f7c452ce973a95b959c

Malware Config
Signatures 2

Filter: none

  • Suspicious behavior: GetForegroundWindowSpam
    AcroRd32.exe

    Reported IOCs

    pidprocess
    1988AcroRd32.exe
  • Suspicious use of SetWindowsHookEx
    AcroRd32.exe

    Reported IOCs

    pidprocess
    1988AcroRd32.exe
    1988AcroRd32.exe
    1988AcroRd32.exe
    1988AcroRd32.exe
Processes 1
  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INVITATION_2021105911.pdf"
    Suspicious behavior: GetForegroundWindowSpam
    Suspicious use of SetWindowsHookEx
    PID:1988
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • memory/1988-60-0x0000000075DA1000-0x0000000075DA3000-memory.dmp