be9985612064c88868bce74c45453e0b302ea1c34c3c9fea4a9eb0531d67f262 | Triage

Analysis

max time kernel
157s
max time network
138s
platform
windows7_x64
resource
win7-en-20211014
submitted
29-10-2021 13:21

Sharing

Report Analysis Logs

General

Target

ilktxiuvydk651 .qtc651 mvc.kgdi651 bvo.mgggvc651 uqq.w.pdf
Size

197KB
MD5

8ba705ac3b200f126494ace50150791a
SHA1

1f88d98d5c43f5f37daeb12b8385fbf5f8f073df
SHA256

be9985612064c88868bce74c45453e0b302ea1c34c3c9fea4a9eb0531d67f262
SHA512

f9673dc5532e44fa3adbd7310a5fa69dee05af9ef667ccf0a7a5df58b127f40dcaef4360e0d4f1467319203162b91f10f2f5f9dce10a7f80dd1c1d771b482077

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1516 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1516 AcroRd32.exe
1516 AcroRd32.exe
1516 AcroRd32.exe
1516 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ilktxiuvydk651 .qtc651 mvc.kgdi651 bvo.mgggvc651 uqq.w.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1516

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-55-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

Filesize
8KB

Download