7b9561de8ac54f361fe264d344f8f7234630118bdd8cc9c85224a711d446490e | Triage

Analysis

max time kernel
150s
max time network
53s
platform
windows7_x64
resource
win7v20210408
submitted
14-10-2021 05:08

Sharing

Report Analysis Logs

General

Target

NEW_TABLEWARE_(AND-LIVING_COMPANY)_2021105794.pdf
Size

268KB
MD5

87f584417510cdef6fe784427c2a23cb
SHA1

9263a7cee4840bb66a57195659179e5b3d6eac3b
SHA256

7b9561de8ac54f361fe264d344f8f7234630118bdd8cc9c85224a711d446490e
SHA512

33b0a098ff91682d18a609921c32fe70d198a35cd25f61dfc3b1d11f7d7976998ced1f5a6f070a3fdcccc15341d5272f223356b4764699e389e9e1c182588f3c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2008 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2008 AcroRd32.exe
2008 AcroRd32.exe
2008 AcroRd32.exe
2008 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_TABLEWARE_(AND-LIVING_COMPANY)_2021105794.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2008-59-0x0000000075AD1000-0x0000000075AD3000-memory.dmp

Filesize
8KB

Download