e5dc8f8bf94fd977c29cd99dc210ef63662b2491824658bacadcf58b3d5e459f | Triage

Analysis

max time kernel
149s
max time network
101s
platform
windows7_x64
resource
win7-en-20210920
submitted
31-10-2021 03:07

Sharing

Report Analysis Logs

General

Target

7VFLaml93 VHwBqNV5x sjZPyG hip7SLfSq LPkiBBxOf pd.pdf
Size

92KB
MD5

ae73c7a1593244bbd23b7af026d0636a
SHA1

70352d73aca336bcdc9d7402329d9e75caef930e
SHA256

e5dc8f8bf94fd977c29cd99dc210ef63662b2491824658bacadcf58b3d5e459f
SHA512

fa524d4bb995da8567af63d9265f2936a0ecd3fbbe0bdd981893496621a28858bd3f33388022bef011e6a8e2574c476682cf13573e65b1c645e3f76a7e317c44

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

688 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

688 AcroRd32.exe
688 AcroRd32.exe
688 AcroRd32.exe
688 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7VFLaml93 VHwBqNV5x sjZPyG hip7SLfSq LPkiBBxOf pd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:688

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/688-54-0x00000000767F1000-0x00000000767F3000-memory.dmp

Filesize
8KB

Download