e536cf3d0c9db06af563df82e4906027adbe61e07c27c972e0e2b1a4debe8441 | Triage

Analysis

max time kernel
159s
max time network
144s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 03:09

Sharing

Report Analysis Logs

General

Target

88910*86p 3496*2030p 2*8454p 236*4p 3053918p 64*6917p 77*689p 1549760*81p 8782p 54.pdf
Size

190KB
MD5

a78c12c0e5a02ed6541b468345c744f2
SHA1

bd0d41e27269367a7398864cfd5a515a6ac101d5
SHA256

e536cf3d0c9db06af563df82e4906027adbe61e07c27c972e0e2b1a4debe8441
SHA512

7c58d00b92bbba6fb2628c4d1b3faa8d3e0e747174bd19d2b3cc2f0935402c8aca3d402680036b725739dec4ac38fb46015ac0086b86f159408c5093f3105df1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

656 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

656 AcroRd32.exe
656 AcroRd32.exe
656 AcroRd32.exe
656 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88910_86p 3496_2030p 2_8454p 236_4p 3053918p 64_6917p 77_689p 1549760_81p 8782p 54.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:656

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/656-54-0x0000000074B91000-0x0000000074B93000-memory.dmp

Filesize
8KB

Download