c6f92a559449b7d89203da3f7c8fddf06fec315a572ff91c52d5c698f333153c | Triage

Analysis

max time kernel
152s
max time network
144s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:25

Sharing

Report Analysis Logs

General

Target

NEW_CATALOGUE_(AND-LIVING_COMPANY)_2021104256.pdf
Size

181KB
MD5

33d277709fa1d8e43e5a05f1ca746927
SHA1

e0e28a29e6f9afd34337a80220fc84d4e1d33c96
SHA256

c6f92a559449b7d89203da3f7c8fddf06fec315a572ff91c52d5c698f333153c
SHA512

e721cce3fa30adbf710b50408f4c759343fbf5ada8d1041af6dc1f96124ffd6c1ee5b426d356aa71f32febc726b471a90b168ce8acc7ff9a24d8fffbbc442cae

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1520 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1520 AcroRd32.exe
1520 AcroRd32.exe
1520 AcroRd32.exe
1520 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_CATALOGUE_(AND-LIVING_COMPANY)_2021104256.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-54-0x0000000076B61000-0x0000000076B63000-memory.dmp

Filesize
8KB

Download