d513bbd048127bb998485d5c2fc035cb17b1bf3061f314391adda480e140406e | Triage

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 03:09

Sharing

Report Analysis Logs

General

Target

49288072*5p 35223p *61267792p 02*57067p 8108*2p 9615p *5635p 7606*p 86863*8p 80995*p 7910205p 83*355.pdf
Size

192KB
MD5

3ba557bdc8b07bc9494d70581cd04160
SHA1

bbb82adbbdc863739aba75750b9a78a36d15cc06
SHA256

d513bbd048127bb998485d5c2fc035cb17b1bf3061f314391adda480e140406e
SHA512

a2c373ca5ccc726e8d6053ec6b85868430c5e4995eaced54296fb80746ed96881a368f25a577c17da56f55f1c8396857fd6ce1c04fca06f512bcb26f1e22f02f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

660 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

660 AcroRd32.exe
660 AcroRd32.exe
660 AcroRd32.exe
660 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49288072_5p 35223p _61267792p 02_57067p 8108_2p 9615p _5635p 7606_p 86863_8p 80995_p 7910205p 83_355.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:660

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/660-55-0x00000000762D1000-0x00000000762D3000-memory.dmp

Filesize
8KB

Download