d8ced64785c7c80c212d8ce4bfea3b620e281b876c09b1a6e18134683a6f97f7 | Triage

Analysis

max time kernel
152s
max time network
121s
platform
windows7_x64
resource
win7-en-20211014
submitted
07-11-2021 19:09

Sharing

Report Analysis Logs

General

Target

241547459013o 627493524126190538804o 53356165109463493457538o 69827399968738989984329188o 1463926621.pdf
Size

130KB
MD5

ce09b646dda277121817c7d361a06eaf
SHA1

b1d1bd30bbea6dbec87a7b234117f626c28cf122
SHA256

d8ced64785c7c80c212d8ce4bfea3b620e281b876c09b1a6e18134683a6f97f7
SHA512

651bfbf32db54ef5084c2b905c0a6466a816212b9a437d397ef90dc51df3f2a7caa2c4bf14c831ad8ed94b8f090d220799002eb550e85069c2f516a9fd70c247

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1720 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\241547459013o 627493524126190538804o 53356165109463493457538o 69827399968738989984329188o 1463926621.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1720

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-55-0x0000000074F21000-0x0000000074F23000-memory.dmp

Filesize
8KB

Download