0de2f6a9acd7771f7083f0b2bc6fafcc0bb8c06eb94b1c28f575d8abf3fb0720 | Triage

Analysis

max time kernel
151s
max time network
137s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:25

Sharing

Report Analysis Logs

General

Target

Презентация СЕО.pdf
Size

395KB
MD5

16e3f1015e92107377e999a74d09263e
SHA1

166e4c49aa1866c85a5998c2a36986942a90e122
SHA256

0de2f6a9acd7771f7083f0b2bc6fafcc0bb8c06eb94b1c28f575d8abf3fb0720
SHA512

4994912cf7089ac84198b08f072e5ebc6dcf7bedf8d6dc676e65adcade9669ccbc2f8886321d0b0a9729074e8ab64c6233bd506830dcf1d92e3a1a81bda73d59

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1720 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Презентация СЕО.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-53-0x0000000075331000-0x0000000075333000-memory.dmp

Filesize
8KB

Download