aab37751cca107c9d8c486662e17e5e238c728213d46385a34645b38161f85de | Triage

Analysis

max time kernel
151s
max time network
129s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:24

Sharing

Report Analysis Logs

General

Target

NEW_ARRIVALS_(AND-LIVING_COMPANY)_2021102491.pdf
Size

222KB
MD5

b77f7b81dcc0c9ffb16583cf8be15e06
SHA1

b308ffa2f9c7aa2db54c20be489fc495803d2a45
SHA256

aab37751cca107c9d8c486662e17e5e238c728213d46385a34645b38161f85de
SHA512

a656f08ab6a1a899474d77cc8cdd6c678fda9770ce052ed222a0cfbd70a8ea5ee6cd85de329b5c34c449ff8fdc99639eb3ce0d945c52a6da59d9f9d181d56f64

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1456 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1456 AcroRd32.exe
1456 AcroRd32.exe
1456 AcroRd32.exe
1456 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_ARRIVALS_(AND-LIVING_COMPANY)_2021102491.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1456-53-0x0000000075BD1000-0x0000000075BD3000-memory.dmp

Filesize
8KB

Download