cf7a112c93e5e8dbc57176387b402f728d2e05d88b259b9604e3024bd547295a | Triage

Analysis

max time kernel
152s
max time network
96s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 19:18

Sharing

Report Analysis Logs

General

Target

open and click 42111p 5*2760862p 806*p 503696359*p 7176392p 83*6p 73821054p 4*0427877p 2*281513p 411.pdf
Size

218KB
MD5

858e754dee131c1cfaa1720d20e210cd
SHA1

4bf832d0dc17a7fd8893a8b5ede6ef66022e119b
SHA256

cf7a112c93e5e8dbc57176387b402f728d2e05d88b259b9604e3024bd547295a
SHA512

94c01a540a190794ea2f8124849dacc8a3b74d097ecf39329bc1841f35ed2efed63b6ae21cab992ee6f160ead689cc4de3902d4a51b7f4728f14047ddbebeed8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 42111p 5_2760862p 806_p 503696359_p 7176392p 83_6p 73821054p 4_0427877p 2_281513p 411.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download