5de9c0b2bcaa84377c7c8179306c703024d4d2794fc21d0a6b57e06f86e7ad8d | Triage

Analysis

max time kernel
155s
max time network
127s
platform
windows7_x64
resource
win7-en-20211014
submitted
29-10-2021 19:10

Sharing

Report Analysis Logs

General

Target

biuzp.pwys382 hd.bnlpctw382 .ghx382 q.yznyjwsw382 gm.mzg382 pfsjb382 x.aq382 semd382 f.q.pdf
Size

166KB
MD5

7cc8c1e149e6c6377798cc68430791b7
SHA1

a0f82ccdbd092f2dcca0b9cf35baac87d448318c
SHA256

5de9c0b2bcaa84377c7c8179306c703024d4d2794fc21d0a6b57e06f86e7ad8d
SHA512

6f66c2ba2621a456d848281f50d57306663bf45306c55e1e4ecdb830c6257349ca9b5b5fc2d3cc4768e0b66066aadcd076de1eabc8f5c8bd494c5cef060ace58

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

944 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\biuzp.pwys382 hd.bnlpctw382 .ghx382 q.yznyjwsw382 gm.mzg382 pfsjb382 x.aq382 semd382 f.q.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:944

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/944-55-0x00000000754F1000-0x00000000754F3000-memory.dmp

Filesize
8KB

Download