7b0f7216d93c92fff6e6b71257ab3fdb44a075a1c77377a8b403c3a6da40b538 | Triage

Analysis

max time kernel
155s
max time network
118s
platform
windows7_x64
resource
win7-en-20211014
submitted
19-10-2021 09:55

Sharing

Report Analysis Logs

General

Target

2026873@251*8886@29*065324@3*26592@287*5812@927*1731@44*183@7*63420*5@5701@*64511@*559653009@*101034.pdf
Size

98KB
MD5

b3b45337b55bbc21bed034a9dd79437b
SHA1

52c4cc4e70a18dbe90ee6a4416b492dd4145b97a
SHA256

7b0f7216d93c92fff6e6b71257ab3fdb44a075a1c77377a8b403c3a6da40b538
SHA512

9e001a4173e1ed6cedde2090b22619eaf1477c4d93bfb275762da5df591bca7441d2364ae5b73f994a8fcb19d23eb695d72b31a213fcf03d8312348cf676f59b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2040 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2040 AcroRd32.exe
2040 AcroRd32.exe
2040 AcroRd32.exe
2040 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2026873@251_8886@29_065324@3_26592@287_5812@927_1731@44_183@7_63420_5@5701@_64511@_559653009@_101034.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2040-55-0x0000000075D31000-0x0000000075D33000-memory.dmp

Filesize
8KB

Download