ad86070473998cf2d04c7b24b2ba7183179cf4e6c2ac4fca9cafc43f9906aa83 | Triage

Analysis

max time kernel
154s
max time network
145s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:25

Sharing

Report Analysis Logs

General

Target

NEW_CATALOGUE_2021108511.pdf
Size

222KB
MD5

5882ef244480d7d8de7ba6a3267a1bf2
SHA1

96bf1af9e7e3d84470c5efd48b62a99dfab1b5ab
SHA256

ad86070473998cf2d04c7b24b2ba7183179cf4e6c2ac4fca9cafc43f9906aa83
SHA512

3269e17145bc6f9ffd31ae7db03d9c681a4a4c937a1c8427c7a9f62002aea790ca81654b119a98b461aec5e9367e4c0c0f8988c5024269a4c416533acd1962c2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1544 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1544 AcroRd32.exe
1544 AcroRd32.exe
1544 AcroRd32.exe
1544 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_CATALOGUE_2021108511.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1544-54-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download