f4ca328129eb080d4ccc086fb72964bbd198eea6d5b917ba7d76657cbb57ec6c | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:14

Sharing

Report Analysis Logs

General

Target

KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021107765.pdf
Size

225KB
MD5

bdbbd5b37a045690a4ce290cb7d641d1
SHA1

ee59d4f91216db26c42b2a1b7fa61f2395cd6c31
SHA256

f4ca328129eb080d4ccc086fb72964bbd198eea6d5b917ba7d76657cbb57ec6c
SHA512

cbe7c1c299435fa2c701067181769519fc6fe0ff0bc855ba077f85d7648e4811c4b1376d34c3bcd7570dd0930a9a37def22c99ee5757e0d2e35007983473fc12

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

964 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

964 AcroRd32.exe
964 AcroRd32.exe
964 AcroRd32.exe
964 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021107765.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/964-53-0x00000000757B1000-0x00000000757B3000-memory.dmp

Filesize
8KB

Download