221434320af2d62a22dcdd44ed5045902a3f62ae793727820e233e700ef99319 | Triage

Analysis

max time kernel
154s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 19:17

Sharing

Report Analysis Logs

General

Target

open and click 44020*p 784881p 0685*83021p 43*8294p 89118*15p 053095p 4*55p 8141p 554*16011*p 094596.pdf
Size

130KB
MD5

ee66d430f6edeebf3e71e90563d8e5e5
SHA1

f6d65597c54632f5f854973537bca209fb559f45
SHA256

221434320af2d62a22dcdd44ed5045902a3f62ae793727820e233e700ef99319
SHA512

e7ac0d8d7f4410166059fad366069cad433c2989212e0d552bb1b0c59d440bade114a738da351607e5f8135bc80464972197c8a5fce772fe8fb3d330bb6fa0df

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1444 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 44020_p 784881p 0685_83021p 43_8294p 89118_15p 053095p 4_55p 8141p 554_16011_p 094596.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1444

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1444-55-0x00000000758C1000-0x00000000758C3000-memory.dmp

Filesize
8KB

Download