Analysis
-
max time kernel
153s -
max time network
128s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
02-11-2021 19:12
Behavioral task
behavioral1
Sample
open and click lzwnmk9 jvqn9 .mpfp9 n.ycquz9 mrmu.9 wlfjtxsa.x9 wqer.m9 .pdf
Resource
win7-en-20211014
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
open and click lzwnmk9 jvqn9 .mpfp9 n.ycquz9 mrmu.9 wlfjtxsa.x9 wqer.m9 .pdf
Resource
win10-en-20211014
0 signatures
0 seconds
General
-
Target
open and click lzwnmk9 jvqn9 .mpfp9 n.ycquz9 mrmu.9 wlfjtxsa.x9 wqer.m9 .pdf
-
Size
93KB
-
MD5
9391b734177f00595db57019123515ca
-
SHA1
45dde46d696bab87b90a8dfcc1b2b6bf7b511ef2
-
SHA256
cd795d1a110f364dcbbd54d14a722db4e34f70e3920e6f271fc22f91006612cb
-
SHA512
9c2c49b228bf0b15992f901d2b0d17941b4ae6e2210e2ec558f8ccdbe1dce74b56128d12f6a386c718897c0ba838f407059a4e91bfbf07d7acb76e705e8ff5d8
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1360 AcroRd32.exe 1360 AcroRd32.exe 1360 AcroRd32.exe 1360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click lzwnmk9 jvqn9 .mpfp9 n.ycquz9 mrmu.9 wlfjtxsa.x9 wqer.m9 .pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1360-55-0x0000000074F61000-0x0000000074F63000-memory.dmpFilesize
8KB