f9d12a6f088271132b4dc3c29e636744a89767f5ed0c87d5698280481bac58b4 | Triage

Analysis

max time kernel
152s
max time network
128s
platform
windows7_x64
resource
win7-en-20210920
submitted
01-11-2021 19:17

Sharing

Report Analysis Logs

General

Target

open and click 65726*73p 10*7p 100217p 3*1136p 8*14059p 098*p 1520764p 11*47460p 9*3440*81p 904*9160.pdf
Size

219KB
MD5

617cfc5073eaf63c3b0fee2bb1578248
SHA1

30e527e6eb53471b9ec63fd5d3d2e73bdf6f4934
SHA256

f9d12a6f088271132b4dc3c29e636744a89767f5ed0c87d5698280481bac58b4
SHA512

833f05219fce78b328930ba08de3b31f97b53737ccfd7bbaef4b69c3927ff09381f7cc77b0b6fc3b57c5c1cecce0c3bfe0edcf38c3a9fc9a0cf0aa097ef86ee6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1528 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1528 AcroRd32.exe
1528 AcroRd32.exe
1528 AcroRd32.exe
1528 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 65726_73p 10_7p 100217p 3_1136p 8_14059p 098_p 1520764p 11_47460p 9_3440_81p 904_9160.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1528

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1528-54-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download