a548eb62c7c060475ec1f67f6622c1950e0d6f6aa6e745ffa46de74ebfb8089a | Triage

Analysis

max time kernel
154s
max time network
30s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 20:30

Sharing

Report Analysis Logs

General

Target

AND-LIVING_INVITATION_2021104171.pdf
Size

268KB
MD5

4230512f52344db31d571102f39a1460
SHA1

a2480ca2f172518c7333c3b715d7290e2b02479b
SHA256

a548eb62c7c060475ec1f67f6622c1950e0d6f6aa6e745ffa46de74ebfb8089a
SHA512

10658a8026c6b834af6d2e95c8eab5673da854323a48e3aaee4bf494be4d835eb8348518f6c1d08f96c6ac34eb765a85da9fb0ef67115930d6897e2c5ee698ce

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1700 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1700 AcroRd32.exe
1700 AcroRd32.exe
1700 AcroRd32.exe
1700 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_INVITATION_2021104171.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-54-0x0000000075661000-0x0000000075663000-memory.dmp

Filesize
8KB

Download