8a24f5f0a74a3c54b177fbcbc688c7a3abf3ef67eaef317f54685a7c714b4349 | Triage

Analysis

max time kernel
150s
max time network
57s
platform
windows7_x64
resource
win7v20210408
submitted
14-10-2021 05:08

Sharing

Report Analysis Logs

General

Target

Bвoд_в_экcплyaтaцию_OKC.pdf
Size

79KB
MD5

25a5e8b32fc9686eb565f72183aae119
SHA1

fe2d1c50451438f00cbdb4ef9586286f7ada9bab
SHA256

8a24f5f0a74a3c54b177fbcbc688c7a3abf3ef67eaef317f54685a7c714b4349
SHA512

ed4572e253965b50c25984222233246d2490e08edd8f6f5dd5d0efcd53de63802b2099aba9739a510ac78419a5f52be4c330add0135f352a95a65c21a0f7c17f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1276 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1276 AcroRd32.exe
1276 AcroRd32.exe
1276 AcroRd32.exe
1276 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bвoд_в_экcплyaтaцию_OKC.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1276

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1276-60-0x0000000075B31000-0x0000000075B33000-memory.dmp

Filesize
8KB

Download