e9b3566f2ad607fca56e85322e3b0937226365eaf4c018dafb35bfb96d5c41d6 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-10-2021 19:16

Sharing

Report Analysis Logs

General

Target

Proposal Cost.pdf
Size

76KB
MD5

f49a29ef8eacbc8a9916f5798e95cbd1
SHA1

86f22746425fbc60a9c5064c7087af2fd526aa50
SHA256

e9b3566f2ad607fca56e85322e3b0937226365eaf4c018dafb35bfb96d5c41d6
SHA512

c489f62c635a5a05564882c9fe0d5a02479c50555dc5ac0fac7c4c7f2b995667f6534339ee5a7a50619c053f36014d27486fe811b503da3a285685b51f6b0966

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1620 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1620 AcroRd32.exe
1620 AcroRd32.exe
1620 AcroRd32.exe
1620 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Proposal Cost.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1620

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1620-54-0x0000000075A71000-0x0000000075A73000-memory.dmp

Filesize
8KB

Download