7168cace81880c95dbdd931b2cc7a9e40bf4b5b23953af0798ab39159fb7e357 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-en-20211014
submitted
26-10-2021 10:12

Sharing

Report Analysis Logs

General

Target

ItineraryKOVJNV_23OCT.pdf
Size

97KB
MD5

6618a4ea410a64cfec3af5c67efc7b6e
SHA1

7ec0ff44b6f3fb74f7be1585913fc57c3c86857d
SHA256

7168cace81880c95dbdd931b2cc7a9e40bf4b5b23953af0798ab39159fb7e357
SHA512

6cf0a0caa7b1edeca9288b5f4266e63cc4bacbffec71a130ecc1bd5b90a48a3ccb2ae02bc197038314eecef878d3c1fcce1bd799a2501dec1489b50a296a9bed

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1880 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ItineraryKOVJNV_23OCT.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1880

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1880-55-0x0000000075D41000-0x0000000075D43000-memory.dmp

Filesize
8KB

Download