Analysis
-
max time kernel
151s -
max time network
124s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
29-10-2021 19:12
Behavioral task
behavioral1
Sample
xorfyvz926 b.ncl926 zfsyofc.y926 xbic.d926 sxp.926 ajfelmg926 d.eqnjyrc926 v.epmgghu926 yt.kwpgn926.pdf
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
xorfyvz926 b.ncl926 zfsyofc.y926 xbic.d926 sxp.926 ajfelmg926 d.eqnjyrc926 v.epmgghu926 yt.kwpgn926.pdf
Resource
win10-en-20210920
General
-
Target
xorfyvz926 b.ncl926 zfsyofc.y926 xbic.d926 sxp.926 ajfelmg926 d.eqnjyrc926 v.epmgghu926 yt.kwpgn926.pdf
-
Size
193KB
-
MD5
abf2f5a33dc27921014f78bff347f9cd
-
SHA1
837544c33d9d885366179c90dea02a22f1e008ee
-
SHA256
82ff69727e1537e6b6b18a69fd0159a3e4a89eeb804f099be8ca8d530ebf75d0
-
SHA512
256eeb92cad9d81bf529c907ae625004bda924430a675519866cabf057ceb9754fbd241aaae48e02860482ac346b9c9fe78a1967699ce6d77476004416f3432a
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1232 AcroRd32.exe 1232 AcroRd32.exe 1232 AcroRd32.exe 1232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\xorfyvz926 b.ncl926 zfsyofc.y926 xbic.d926 sxp.926 ajfelmg926 d.eqnjyrc926 v.epmgghu926 yt.kwpgn926.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1232-55-0x0000000075821000-0x0000000075823000-memory.dmpFilesize
8KB