9f0d15c02e73fa090a0f529d75b27434ef690d4bef57737d32c9e1ddf06e42ea | Triage

Analysis

max time kernel
152s
max time network
118s
platform
windows7_x64
resource
win7-en-20211014
submitted
29-10-2021 19:12

Sharing

Report Analysis Logs

General

Target

ilncfpfolu.21 bqshri21 j.hz21 zlhnb21 v.iwl.pdf
Size

119KB
MD5

2295f9e48f6c5deb68c69a98c9569f80
SHA1

cab2fd01985b3a6e4381f11d78bd9c42991e8641
SHA256

9f0d15c02e73fa090a0f529d75b27434ef690d4bef57737d32c9e1ddf06e42ea
SHA512

e6081491b4e5afda920d3be40d80ca884eaba63bfef87a9e80ccbd5920784ebf3303c839600feb8948c3d6af6c2c050f37e5e70542f457d59639582715ef5b90

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1652 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1652 AcroRd32.exe
1652 AcroRd32.exe
1652 AcroRd32.exe
1652 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ilncfpfolu.21 bqshri21 j.hz21 zlhnb21 v.iwl.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1652

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1652-55-0x0000000076431000-0x0000000076433000-memory.dmp

Filesize
8KB

Download