0e9e7d77d4df545a732e12cf7753c533fa0f0924a965b3d3c489ad284f61115d | Triage

Analysis

max time kernel
151s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
18-10-2021 21:24

Sharing

Report Analysis Logs

General

Target

NEW_KITCHENWARE_(AND-LIVING_COMPANY)_2021105698.pdf
Size

268KB
MD5

b4d2ae7bacbaabc1d5aef6746d5e0b36
SHA1

5911af959688cfbe58c260d3f22355c1935845ed
SHA256

0e9e7d77d4df545a732e12cf7753c533fa0f0924a965b3d3c489ad284f61115d
SHA512

349d9b1dbe2a8b08ae8790a7f9c64d741b88068591590b5842ec28df8324b906f493635783d1031854b4498ef2e62cbe7702169aa51b59d9b32691b7d35870e3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1528 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1528 AcroRd32.exe
1528 AcroRd32.exe
1528 AcroRd32.exe
1528 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_KITCHENWARE_(AND-LIVING_COMPANY)_2021105698.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1528

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1528-54-0x00000000754F1000-0x00000000754F3000-memory.dmp

Filesize
8KB

Download