922f1e2ff3e1d897d5d815b8f8c74de9b8571d3c65e8ebf73ca7849683882af7 | Triage

Analysis

max time kernel
159s
max time network
122s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 19:20

Sharing

Report Analysis Logs

General

Target

open and click 02576*964p 3390*904p 0349*12p 9006*6p 8860p 48560*977p 08483*7p 7641*754p 71664*p 124.pdf
Size

215KB
MD5

de0e6c4bae914bff53ca4e3d7f5f8312
SHA1

ca502e27a5790a63e21101561c6ff8b30ae78c11
SHA256

922f1e2ff3e1d897d5d815b8f8c74de9b8571d3c65e8ebf73ca7849683882af7
SHA512

c9b9aa8927d522402229b7de44bb37400a7f138ecdf2c2363aefddbbc194ce1320d746094ad41716103f207ed9e4a8871ed49655d7a09525bf58b390e863be9b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1328 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1328 AcroRd32.exe
1328 AcroRd32.exe
1328 AcroRd32.exe
1328 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 02576_964p 3390_904p 0349_12p 9006_6p 8860p 48560_977p 08483_7p 7641_754p 71664_p 124.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1328

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1328-55-0x00000000754A1000-0x00000000754A3000-memory.dmp

Filesize
8KB

Download