7f7a231c33258984eb512f16725b855635f00a9f27f8ebc80c6e5e832ac651b4 | Triage

Analysis

max time kernel
152s
max time network
101s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 03:07

Sharing

Report Analysis Logs

General

Target

014963*3853p 81593*214p 60989p *508172p 360*2p 486053*2p 1925p 4053*p 69609478*p 49153*62p 52408078*.pdf
Size

158KB
MD5

4d4cc081cfa1bed28edaf4018e0f8684
SHA1

d039c4e14316f3cc35fbd1ccc0205d327559d980
SHA256

7f7a231c33258984eb512f16725b855635f00a9f27f8ebc80c6e5e832ac651b4
SHA512

9beca4e065c760c650d5204d8713c28de984681129fc3102334e0270090fdce901c2602dd35e0a229d94681155cd7205d883423d3b54920cf07496dd993512ea

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

864 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\014963_3853p 81593_214p 60989p _508172p 360_2p 486053_2p 1925p 4053_p 69609478_p 49153_62p 52408078_.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:864

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/864-54-0x0000000075661000-0x0000000075663000-memory.dmp

Filesize
8KB

Download