a8907c19fd969611f415dd4787106d28fc94ae01fb05f32bdb9ba75fc73409fc | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-en-20211014
submitted
31-10-2021 19:07

Sharing

Report Analysis Logs

General

Target

24408265*p 214046p 368*1p 3682116*p 7356337p 304*34p 03093*8p 172425p 16*13p 8607*60p 435*1284p 90*2.pdf
Size

102KB
MD5

c6e163a64ce9f51afcd38c3db424d978
SHA1

9971530322e5132f090825b92ea2a42500bef850
SHA256

a8907c19fd969611f415dd4787106d28fc94ae01fb05f32bdb9ba75fc73409fc
SHA512

5ea4f4da3a504fd0f1e1d74a054eb45842236460a02ffe66bce6b3ec66db1fd7cf5e9e71818db4a31b8193df403d3f1d7d47801e0df229777bc5ef33ddedbc98

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24408265_p 214046p 368_1p 3682116_p 7356337p 304_34p 03093_8p 172425p 16_13p 8607_60p 435_1284p 90_2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-55-0x0000000074F61000-0x0000000074F63000-memory.dmp

Filesize
8KB

Download