3ef78b303ad8fb8f3232c488338a5e3083f636b7f342cfd31a11a179049eeab0 | Triage

Analysis

max time kernel
154s
max time network
128s
platform
windows7_x64
resource
win7-en-20210920
submitted
31-10-2021 19:09

Sharing

Report Analysis Logs

General

Target

8707274878p *320389*14p 257*1p 1420*237p 8850p 44*647p 4750108*3p 865198p 88*4243p 56353*74p 8004151.pdf
Size

103KB
MD5

b94fcf5d31b3002449d2c2532d32409c
SHA1

3b9dd010f638bbbba4af4da2c1dc4cb72d8fbaa9
SHA256

3ef78b303ad8fb8f3232c488338a5e3083f636b7f342cfd31a11a179049eeab0
SHA512

d8f19e5ceb91cea5d3993d4764dcda997dd0114050a581d948da576cbd979fd36c3961da141406610b10ce56415a23ecfa321b6a2433c943f52620b9a6a2c166

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

524 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

524 AcroRd32.exe
524 AcroRd32.exe
524 AcroRd32.exe
524 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8707274878p _320389_14p 257_1p 1420_237p 8850p 44_647p 4750108_3p 865198p 88_4243p 56353_74p 8004151.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:524

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/524-54-0x0000000075C11000-0x0000000075C13000-memory.dmp

Filesize
8KB

Download