de82c9b6b2b9a3baca7a5d41e6ffa71903197243e2e76b834f5adf8309f9c2ac | Triage

Analysis

max time kernel
152s
max time network
139s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-10-2021 13:23

Sharing

Report Analysis Logs

General

Target

Cl_ Lina ,26) Lives Near From You.pdf
Size

86KB
MD5

50fdbb6e1dadec5afdf27562f0cf954c
SHA1

c762e9657ac52114f144deb0a71c544e0e71e728
SHA256

de82c9b6b2b9a3baca7a5d41e6ffa71903197243e2e76b834f5adf8309f9c2ac
SHA512

5221982fbdaa0e00f6036dc16b19c933f554f15ee3fa1012ef5134bf2b16eac3ef6719e97b87c41f59bc675296b428a1a261179661814bc4005fcf1835bfe163

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1140 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1140 AcroRd32.exe
1140 AcroRd32.exe
1140 AcroRd32.exe
1140 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Cl_ Lina ,26) Lives Near From You.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1140

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1140-54-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download