ba289a16df1152ec6620ce207b22047383c2905141f9e59a7e0b8a2eaac45180 | Triage

Analysis

max time kernel
145s
max time network
133s
platform
windows7_x64
resource
win7-en-20210920
submitted
02-11-2021 00:21

Sharing

Report Analysis Logs

General

Target

American Metal Chemical Corporation.pdf
Size

109KB
MD5

ad26f685d83ee78049e295a2015ccfbd
SHA1

15dd51017e33cd5f31c1899917a67b69736f8b4d
SHA256

ba289a16df1152ec6620ce207b22047383c2905141f9e59a7e0b8a2eaac45180
SHA512

aeda020ada69db1ce9dcc947d2d0a518e78646bcc6f521696d40b11ddbf05e9e086542df678a2f74eabec25c588a9c76c4b52448dd54550e5b00c344ef45cd11

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1860 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1860 AcroRd32.exe
1860 AcroRd32.exe
1860 AcroRd32.exe
1860 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\American Metal Chemical Corporation.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1860

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1860-54-0x0000000076A81000-0x0000000076A83000-memory.dmp

Filesize
8KB

Download