16a775e2833a036efaf5a87102bfd6bb34ca36c4296d1842dbd2cef0cbb954b2 | Triage

Analysis

max time kernel
154s
max time network
117s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 03:09

Sharing

Report Analysis Logs

General

Target

9021737*27p 23134p 4*05356p 302*551685p 3653*3p 48813p 680*6044p *955485*3p 9242*99p 552087p 5*56820.pdf
Size

190KB
MD5

612504dd2562b2d1c9d81e2972407582
SHA1

0b09f3d07aee25a2dc536481ed2feeb557279352
SHA256

16a775e2833a036efaf5a87102bfd6bb34ca36c4296d1842dbd2cef0cbb954b2
SHA512

97f3e65ac7fd07014081fa83c97417f4f641ee5fa98db3aee0af6fd80bf4424f9cb13a11847e34fe32477ae661de6fdf6a5087efa26b08b7f90a712cb09aadd5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

764 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

764 AcroRd32.exe
764 AcroRd32.exe
764 AcroRd32.exe
764 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9021737_27p 23134p 4_05356p 302_551685p 3653_3p 48813p 680_6044p _955485_3p 9242_99p 552087p 5_56820.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:764

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/764-55-0x0000000075D41000-0x0000000075D43000-memory.dmp

Filesize
8KB

Download