ee9bb47f0d2fe64f727b421117a892b3236165722771120dea1ab978e5f2e3a7 | Triage

Analysis

max time kernel
155s
max time network
134s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:14

Sharing

Report Analysis Logs

General

Target

NEW_ITEMS_2021103103.pdf
Size

187KB
MD5

49c54455cdf2c8e07896bd21a998e3c6
SHA1

6e77b7b43748f84c60aa0ec8c9387981b1fdc45b
SHA256

ee9bb47f0d2fe64f727b421117a892b3236165722771120dea1ab978e5f2e3a7
SHA512

9cfe37e8dd659f0e731d7f99961be8b80c1ef4a04a80c4120f22443ca14555df716c345e61a67fe7ca003a76d2a3c7aad477724f4165ea05338ddf844ec83ddd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

860 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

860 AcroRd32.exe
860 AcroRd32.exe
860 AcroRd32.exe
860 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_ITEMS_2021103103.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/860-54-0x00000000751A1000-0x00000000751A3000-memory.dmp

Filesize
8KB

Download