c6e6d3cd595513598dad7fa7b94963dad2195f2027a5fc16579d9e546ed21683 | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-en-20211014
submitted
30-10-2021 03:08

Sharing

Report Analysis Logs

General

Target

42380r30390.pdf
Size

97KB
MD5

c7cfa05bc27d9e2e95f1a47ebd200925
SHA1

aa6fd78479e5d2098dfad0254f8836aecf7d27a3
SHA256

c6e6d3cd595513598dad7fa7b94963dad2195f2027a5fc16579d9e546ed21683
SHA512

bae749678a1a05bec49e44a185d4408612bb66863ec6657644f68c681876cb46cbd050a3e9c35e51fcd4b129cc4946721321b1a3d3d98cee8129a71d9e9e1524

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1728 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1728 AcroRd32.exe
1728 AcroRd32.exe
1728 AcroRd32.exe
1728 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42380r30390.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1728-55-0x0000000075F41000-0x0000000075F43000-memory.dmp

Filesize
8KB

Download