207e1793f8e7491fb9e6c35d71bf5d0ced150d0d6df9c40eef7207145629596e | Triage

Analysis

max time kernel
154s
max time network
152s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:24

Sharing

Report Analysis Logs

General

Target

INVITATION_2021104628.pdf
Size

222KB
MD5

68dc67170c8dbfd7b45bb194807a33f9
SHA1

43c715bb81427b7217bf309880fb02bc2cd4e184
SHA256

207e1793f8e7491fb9e6c35d71bf5d0ced150d0d6df9c40eef7207145629596e
SHA512

86a32dda2e912815d4953625673fab3a5a2ac4428f049f8fe1bd911d69668657dc13bf35810666fddfa67177755bba18d0b5e45d1f87318983b2ace0ffe80e7f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INVITATION_2021104628.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x00000000768C1000-0x00000000768C3000-memory.dmp

Filesize
8KB

Download