Analysis
-
max time kernel
151s -
max time network
119s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
07-11-2021 19:09
Behavioral task
behavioral1
Sample
12337684255819o 71323599001745350717337581o 059703469725047613118o 25426003567107o 07910399774966542.pdf
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
12337684255819o 71323599001745350717337581o 059703469725047613118o 25426003567107o 07910399774966542.pdf
Resource
win10-en-20211104
General
-
Target
12337684255819o 71323599001745350717337581o 059703469725047613118o 25426003567107o 07910399774966542.pdf
-
Size
206KB
-
MD5
ece12f2eb08b4740c19715569cee8375
-
SHA1
f7cfe0c7791f4d0af3fc2e2b191c6976b94c4c29
-
SHA256
a14fb8b953464327dc1f46013f04dacbb3597c97b573e792da3f699e07dd21f6
-
SHA512
1f22adc667ba916112f76a688f1db45e0f04fb470365358d1bcd0696797755baf1f9efbe98b3049269bae933238b74acaea15b9a864607c42976ed5a1c077ad5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 752 AcroRd32.exe 752 AcroRd32.exe 752 AcroRd32.exe 752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12337684255819o 71323599001745350717337581o 059703469725047613118o 25426003567107o 07910399774966542.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/752-55-0x0000000075821000-0x0000000075823000-memory.dmpFilesize
8KB