763a14365a17138e0d13aea5db2604c615919532d4172b947eb4a99b0126f631 | Triage

Analysis

max time kernel
152s
max time network
124s
platform
windows7_x64
resource
win7-en-20211014
submitted
31-10-2021 03:07

Sharing

Report Analysis Logs

General

Target

48918140845# 22331637519160125839# 0071437380# 29037681656# 4418.pdf
Size

162KB
MD5

92cda42b7b504243f6afe4b3fba538de
SHA1

1b8b8eb23e6dc01e67218db8568c344c838e3408
SHA256

763a14365a17138e0d13aea5db2604c615919532d4172b947eb4a99b0126f631
SHA512

8874f6d245ab64f7d0b63fe3ef795f8585b6935a17feda6ad16be723543c4ea902e884b2ec4a3f15d192d9561695fe3d4aa1244a3c0ea8a66361499544f9f3dd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe
2004 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48918140845# 22331637519160125839# 0071437380# 29037681656# 4418.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2004

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-55-0x0000000076231000-0x0000000076233000-memory.dmp

Filesize
8KB

Download