d79da4608667f2b161fdc5765247453495892dfa19b308e3b3fdf7920777cb11 | Triage

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-en-20210920
submitted
25-10-2021 19:54

Sharing

Report Analysis Logs

General

Target

CHARITY_DONATIONS.pdf
Size

490KB
MD5

c99e4f8f3f8c987ed7efcc7ebb6691ea
SHA1

e29cf9cf8a767358529f9beafeacd9a4eb52a1e3
SHA256

d79da4608667f2b161fdc5765247453495892dfa19b308e3b3fdf7920777cb11
SHA512

a70eb2fa7bd424e1cee6d7f26668b381ae385118938f3870c04329080f1694a4757be51a643351fcea076154982d449843d70ea8920c754be899e7624c97ad77

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1564 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1564 AcroRd32.exe
1564 AcroRd32.exe
1564 AcroRd32.exe
1564 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CHARITY_DONATIONS.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1564

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1564-54-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download