f4ca328129eb080d4ccc086fb72964bbd198eea6d5b917ba7d76657cbb57ec6c | Triage

Analysis

max time kernel
150s
max time network
131s
platform
windows7_x64
resource
win7-en-20210920
submitted
18-10-2021 21:25

Sharing

Report Analysis Logs

General

Target

KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021107765.pdf
Size

225KB
MD5

bdbbd5b37a045690a4ce290cb7d641d1
SHA1

ee59d4f91216db26c42b2a1b7fa61f2395cd6c31
SHA256

f4ca328129eb080d4ccc086fb72964bbd198eea6d5b917ba7d76657cbb57ec6c
SHA512

cbe7c1c299435fa2c701067181769519fc6fe0ff0bc855ba077f85d7648e4811c4b1376d34c3bcd7570dd0930a9a37def22c99ee5757e0d2e35007983473fc12

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1988 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1988 AcroRd32.exe
1988 AcroRd32.exe
1988 AcroRd32.exe
1988 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\KITCHENWARE_TABLEWARE(AND-LIVING_COMPANY)_2021107765.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1988

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1988-54-0x0000000075FA1000-0x0000000075FA3000-memory.dmp

Filesize
8KB

Download