38e890f544340c49ba2e6624540eaac9541f68db49bab03a576209ab814313de | Triage

Analysis

max time kernel
151s
max time network
118s
platform
windows7_x64
resource
win7-en-20211014
submitted
01-11-2021 19:17

Sharing

Report Analysis Logs

General

Target

open and click 00282012p 496*17p 959*721052p 23*45p 779*p 34210840*8p 413889*p 8787156*9p 060*9266p.pdf
Size

213KB
MD5

2fe4370a9ea978843c8f084fd549f026
SHA1

a45c145b7ff9c0c0b3635d2f5059f620cf234ad7
SHA256

38e890f544340c49ba2e6624540eaac9541f68db49bab03a576209ab814313de
SHA512

7b5e8bae355c904694be1539ffd5ef59bf000073bf4e337440a4e8bc9ee839e441693f06f5e193e2416f3f2695ab68b925955f045339469f213f9d7be044765f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1676 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1676 AcroRd32.exe
1676 AcroRd32.exe
1676 AcroRd32.exe
1676 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click 00282012p 496_17p 959_721052p 23_45p 779_p 34210840_8p 413889_p 8787156_9p 060_9266p.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1676-55-0x0000000074F61000-0x0000000074F63000-memory.dmp

Filesize
8KB

Download