2f1a9025e089d17e003371f34e22a335b32e45d0624dd79410912d7af21c2158 | Triage

Analysis

max time kernel
154s
max time network
122s
platform
windows7_x64
resource
win7-en-20211014
submitted
18-10-2021 21:16

Sharing

Report Analysis Logs

General

Target

INVITATION_AND-LIVING_2021108362.pdf
Size

185KB
MD5

34b5632f0a323be1fefb95034378a0c3
SHA1

8143784c5a607818b4b1cf4ff795cc3423027dd9
SHA256

2f1a9025e089d17e003371f34e22a335b32e45d0624dd79410912d7af21c2158
SHA512

8e89a28b6ea793653e66df5f90338df4e38253954c1f9b96fb2df9e2e4dedb0a7d76f812c5231d5d43a64d1ba474d554dd621ca44985f15f357ce37ea45b80f0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

972 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

972 AcroRd32.exe
972 AcroRd32.exe
972 AcroRd32.exe
972 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INVITATION_AND-LIVING_2021108362.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/972-55-0x0000000075901000-0x0000000075903000-memory.dmp

Filesize
8KB

Download