9cb98aa75f09a934c0b83ecacb9b8720b145bf1cdfa557ea7902efa72c89eb85 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 19:20

Sharing

Report Analysis Logs

General

Target

AEURNg Bh72wO BxT90YBt QFxJoz gVT8LHFe tATwrebeM Kh91T l3as.pdf
Size

184KB
MD5

cba7304503e657c909cdea3ac70efeed
SHA1

009652a36c1eda7462a4ba921cbdb150ec2a3cc4
SHA256

9cb98aa75f09a934c0b83ecacb9b8720b145bf1cdfa557ea7902efa72c89eb85
SHA512

46533e9f68c1339c6d1fb34c6d107e0cbca6c33368735cdb1bf564df6c2f3a3f89ebf6705a211474b594f1d5016c435207eebda8c9693b679ba1f41f5907697b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1820 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AEURNg Bh72wO BxT90YBt QFxJoz gVT8LHFe tATwrebeM Kh91T l3as.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1820

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1820-55-0x0000000074A41000-0x0000000074A43000-memory.dmp

Filesize
8KB

Download