7909e4c39a195b68e7086f4c2d7d3cddf9230afa54655a576a919417ddfd6105 | Triage

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-10-2021 19:08

Sharing

Report Analysis Logs

General

Target

82150uD84592.pdf
Size

91KB
MD5

a38123a8cc55db3723a40767374fff6c
SHA1

c1b4a908f778f3c8760232d582ba035ddfd2d181
SHA256

7909e4c39a195b68e7086f4c2d7d3cddf9230afa54655a576a919417ddfd6105
SHA512

81b9c04b910fc4e28315409b9f7cbc9a8bcf4ad36e4ecd25163a456a86f2f75db191cd8a7f79319a333ce9314981bf13178a4603adea468d9d0f1c817fce8058

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1532 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1532 AcroRd32.exe
1532 AcroRd32.exe
1532 AcroRd32.exe
1532 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\82150uD84592.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1532-54-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download