03782fac152f1e973b7cecac1dda778051762e653a16fa670003848d1da4a145 | Triage

Analysis

max time kernel
152s
max time network
136s
platform
windows7_x64
resource
win7-en-20211104
submitted
06-11-2021 19:09

Sharing

Report Analysis Logs

General

Target

κανών.pdf
Size

208KB
MD5

1c7bb3bbe42bf17eeb47765d1c6266ec
SHA1

4b827d05ea6d77a95a5506428ef8ffc811e6a55e
SHA256

03782fac152f1e973b7cecac1dda778051762e653a16fa670003848d1da4a145
SHA512

6889e74805a2718dd53aa657bbb2c02f728b09886a878a51e760820ab1c99f5919a2cb2d214cd01531cb95458ebd2f301ffdc757b9f620de3b530cd1c7d0b067

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\κανών.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2036

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2036-55-0x0000000076761000-0x0000000076763000-memory.dmp

Filesize
8KB

Download