4c541b030cdccd422dcdfe4a782cfde6c4b2e10e7adae9ddfac13ed4261bfed8 | Triage

Analysis

max time kernel
152s
max time network
129s
platform
windows7_x64
resource
win7-en-20210920
submitted
31-10-2021 19:09

Sharing

Report Analysis Logs

General

Target

747004742p 4*4476*377p 71*8474*7p 45875*15p 94158*p 6610p *750p 277*86570*p 871038*p 2934p 236*54879.pdf
Size

159KB
MD5

8f4ad7199c402d24735c2158171538f4
SHA1

9c2ea479b4f58148dffc447b53c8409c8a33b0c7
SHA256

4c541b030cdccd422dcdfe4a782cfde6c4b2e10e7adae9ddfac13ed4261bfed8
SHA512

26b510c2f60105e909181d63d097d0af48fcb7cf745dfa45a9d0fbb80df708375ad6fcd3712f52d387794210ca2a6eebc32bd3f8444d6d0ffecde27bb0ece243

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

332 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

332 AcroRd32.exe
332 AcroRd32.exe
332 AcroRd32.exe
332 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\747004742p 4_4476_377p 71_8474_7p 45875_15p 94158_p 6610p _750p 277_86570_p 871038_p 2934p 236_54879.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:332

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/332-54-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download