5716d65bbe0f93fb50faba2fddb4bc9c1dab508a0cb6e80f53cc3ba2fd054015 | Triage

Analysis

max time kernel
152s
max time network
126s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 19:18

Sharing

Report Analysis Logs

General

Target

j9f2EG BwL4Wq 0OagK7R woC45 U2bh.pdf
Size

153KB
MD5

7712867287953a0bb3242aab16c7d5a0
SHA1

7a66edcc4b58a444183b66861b09107dc059b54b
SHA256

5716d65bbe0f93fb50faba2fddb4bc9c1dab508a0cb6e80f53cc3ba2fd054015
SHA512

f14d86af4651fd1ad0f81fd3c5b0596ce0652abb7657e1822afb11549388d6d51db8abc6d835ff1d95e2a390bdde01c53d571649fa9425872ae5d559a0d807ee

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

704 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

704 AcroRd32.exe
704 AcroRd32.exe
704 AcroRd32.exe
704 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\j9f2EG BwL4Wq 0OagK7R woC45 U2bh.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:704

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/704-54-0x0000000075C11000-0x0000000075C13000-memory.dmp

Filesize
8KB

Download