49a422780618290f3bae86f907a7f06cb62ba19ecdb2d5a19247badd1873ddd1 | Triage

Analysis

max time kernel
151s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
31-10-2021 19:07

Sharing

Report Analysis Logs

General

Target

67505894229p *9860*3085p 3*9172p 09748*5p 5173420p 1*88.pdf
Size

115KB
MD5

597d5ec0adc583114ce88c90419c2734
SHA1

e2ca257d495056f9aed35ce9bc579f8be0be50d6
SHA256

49a422780618290f3bae86f907a7f06cb62ba19ecdb2d5a19247badd1873ddd1
SHA512

5e8aa78ba42f07af9091a4d1b7f63dd22836e45a4b6f6aea16fc48bc95d33838f695ce80d2a77e40867252ffc58a3cc473be28451316667788cd8b05d54bae70

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1876 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1876 AcroRd32.exe
1876 AcroRd32.exe
1876 AcroRd32.exe
1876 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67505894229p _9860_3085p 3_9172p 09748_5p 5173420p 1_88.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1876

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1876-55-0x0000000075B71000-0x0000000075B73000-memory.dmp

Filesize
8KB

Download