885fefc052c47945db43fac38a70919ffd735277b3d0a6922c165445cc8dd612 | Triage

Analysis

max time kernel
149s
max time network
40s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:17

Sharing

Report Analysis Logs

General

Target

830517*8662@282*14190*@92053@*620486@627*99865@8555*93790@7*5151176@4*65705@11881*104@5001*@42692534.pdf
Size

188KB
MD5

4aea55641fd359b59c3491dcc82904a8
SHA1

c69d6728e380e2b2bb31b94d1a5c2d38e0248030
SHA256

885fefc052c47945db43fac38a70919ffd735277b3d0a6922c165445cc8dd612
SHA512

ec04d6b18bb6c005b1e4fd7b91a27b6afebe460c6feb062fefc25b5fb0552b11ab3183ecfcce07507f9b676a49d625bf86414339a311e9cb0657a059926f2af2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\830517_8662@282_14190_@92053@_620486@627_99865@8555_93790@7_5151176@4_65705@11881_104@[email protected]"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1120-53-0x0000000075C11000-0x0000000075C13000-memory.dmp

Filesize
8KB

Download