65dafba038aee484d378f2e3d54080495a7946de6d47968a5b2a88a1034d798b | Triage

Analysis

max time kernel
155s
max time network
134s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 19:12

Sharing

Report Analysis Logs

General

Target

open and click 011774643p 2*53040p 761*0049*6p 00084*6703p 5188p *76361p 93330*p 8689538p 657*48997p.pdf
Size

220KB
MD5

f3d64e58440b45d4cf6350ab759bcc5c
SHA1

ad0af60f229b8b11ed9f3a520262728036e12f2f
SHA256

65dafba038aee484d378f2e3d54080495a7946de6d47968a5b2a88a1034d798b
SHA512

c7de1ea28b692a5cda93bbc09c5d6b565e224debb4b652f56ac51875bd1a0c704099755a2dc6dd543008b87ad87ca4a69b69aa9f966e775e8a40738388ca7f05

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

976 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

976 AcroRd32.exe
976 AcroRd32.exe
976 AcroRd32.exe
976 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 011774643p 2_53040p 761_0049_6p 00084_6703p 5188p _76361p 93330_p 8689538p 657_48997p.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/976-54-0x00000000751D1000-0x00000000751D3000-memory.dmp

Filesize
8KB

Download