90bb886b502d1912bdd458406d427952b893107d5e2cb1fa63e0bd271734733d | Triage

Analysis

max time kernel
153s
max time network
33s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:25

Sharing

Report Analysis Logs

General

Target

AND-LIVING_COMPANY_2021107293.pdf
Size

181KB
MD5

16b453237415897b22078ac879051c20
SHA1

0f7c584fd3436b139744c78e45fbeba6bd7c686c
SHA256

90bb886b502d1912bdd458406d427952b893107d5e2cb1fa63e0bd271734733d
SHA512

23a003425488166e82796a8271396ae5f3db99d67312fd5f6ef2ea582fa84bfea9f2a692c165da336b5f3962dbf1c03154ac9ab42b62e0a7249232912ce7bfcf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1700 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1700 AcroRd32.exe
1700 AcroRd32.exe
1700 AcroRd32.exe
1700 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AND-LIVING_COMPANY_2021107293.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-54-0x0000000075661000-0x0000000075663000-memory.dmp

Filesize
8KB

Download