ee547fa65cd51f8132942cb6e2fe355d6dce941909dd16dfbccd73c03c8dd936 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
18-10-2021 21:14

Sharing

Report Analysis Logs

General

Target

AND-LIVING_INVITATION_2021104164.pdf
Size

177KB
MD5

0150ff20da40fb4959fa8181348f1451
SHA1

cf8855354d974954a80f4e47603f5a645d66b007
SHA256

ee547fa65cd51f8132942cb6e2fe355d6dce941909dd16dfbccd73c03c8dd936
SHA512

62a032759e07595895c6e242cabd3ff1f45f33de5999a6a930d29e1ee80781302054200397ac5754af44dacff7003f1f72f6ecbf36ed77e683a02bdbecad1218

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1548 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1548 AcroRd32.exe
1548 AcroRd32.exe
1548 AcroRd32.exe
1548 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_INVITATION_2021104164.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1548-55-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download