6041fb87142f81fcd3aeb3f6259eea186acdc0d3f5cfec86579753e98a758990 | Triage

Analysis

max time kernel
157s
max time network
139s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 19:17

Sharing

Report Analysis Logs

General

Target

open and click 6086138*p 432215p 2722*29350p 0*427p 6555*28423p 6*82615p 65*3558p 391859p *11144p 74.pdf
Size

130KB
MD5

29dbc0bbcb7e4d9478080765df949371
SHA1

b8c08c6bed825339f1dc2efe6e11e31a6f93ad82
SHA256

6041fb87142f81fcd3aeb3f6259eea186acdc0d3f5cfec86579753e98a758990
SHA512

e323d2e0ab3c94dcc512569fd462294648b54d0f0d3eb66c535fb42adcfb08b475fc1f96d93b54107e56af05b97f1cd31e973ff543950efa938fdae06413d287

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

672 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

672 AcroRd32.exe
672 AcroRd32.exe
672 AcroRd32.exe
672 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 6086138_p 432215p 2722_29350p 0_427p 6555_28423p 6_82615p 65_3558p 391859p _11144p 74.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:672

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/672-54-0x00000000759B1000-0x00000000759B3000-memory.dmp

Filesize
8KB

Download