Analysis
-
max time kernel
152s -
max time network
120s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
01-11-2021 03:09
Behavioral task
behavioral1
Sample
90166p 19*336p 72209*2790p 2479*32p 43*21076p 461*2154p *6390*p 3590p 8732*2p 1496497p 91*514081*p 7.pdf
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
90166p 19*336p 72209*2790p 2479*32p 43*21076p 461*2154p *6390*p 3590p 8732*2p 1496497p 91*514081*p 7.pdf
Resource
win10-en-20210920
General
-
Target
90166p 19*336p 72209*2790p 2479*32p 43*21076p 461*2154p *6390*p 3590p 8732*2p 1496497p 91*514081*p 7.pdf
-
Size
158KB
-
MD5
7005aa5d2c85678e953a92cd01bdbe86
-
SHA1
7808078c936a52f81cab908a76a2e1933abac3d5
-
SHA256
84bc82e5103946b725c3e5119a79ace15560a0138061669bcd96954d4260653f
-
SHA512
c2c33d50805e6172023e6de5e4423fd05c050affb8b6165e6d9f30c697f8b1088c27711a5141e9fad4473d7177d128467bcc280408603968ab48d1215b985518
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 524 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 524 AcroRd32.exe 524 AcroRd32.exe 524 AcroRd32.exe 524 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\90166p 19_336p 72209_2790p 2479_32p 43_21076p 461_2154p _6390_p 3590p 8732_2p 1496497p 91_514081_p 7.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/524-55-0x0000000075321000-0x0000000075323000-memory.dmpFilesize
8KB