d6061ff06461a5bc571584aac332d23c5c3624c97c69d1ce2e760cfd476a19a0 | Triage

Analysis

max time kernel
153s
max time network
100s
platform
windows7_x64
resource
win7-en-20210920
submitted
31-10-2021 19:09

Sharing

Report Analysis Logs

General

Target

5305369p 7*0836p 2*06p 077431*955p 8702*489p 0658278*p 75038*689p 9*3242815p 87*7p 814609p 6*873.pdf
Size

187KB
MD5

243beabcd4ae86d156f339d4bdcc95ff
SHA1

d36167c79cc83899323b47cb2a8e4d37a92798b6
SHA256

d6061ff06461a5bc571584aac332d23c5c3624c97c69d1ce2e760cfd476a19a0
SHA512

525ea379dde1878cd9a94fd29d418801b984c8e3ad80ecf607a1968be6383b745a61325716402677a8f2356533442ed41e32ab502db7dde7235e19d707947eb7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

672 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

672 AcroRd32.exe
672 AcroRd32.exe
672 AcroRd32.exe
672 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5305369p 7_0836p 2_06p 077431_955p 8702_489p 0658278_p 75038_689p 9_3242815p 87_7p 814609p 6_873.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:672

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/672-54-0x00000000762D1000-0x00000000762D3000-memory.dmp

Filesize
8KB

Download