69faa11426b9b8dc8e3ff4aab801ccfdc29f92106379fa9dabda78978d430347 | Triage

Analysis

max time kernel
154s
max time network
122s
platform
windows7_x64
resource
win7-en-20211014
submitted
07-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

73242745469175549328576767o 8134927108644858175o 15249034417213o 638071103975426465905298055255o 437.pdf
Size

207KB
MD5

bef33677a867c4f4cb5fec82c0ae4705
SHA1

bc28138907bd91836edc74c49efc552d6bdae630
SHA256

69faa11426b9b8dc8e3ff4aab801ccfdc29f92106379fa9dabda78978d430347
SHA512

322f02ee467233c0afedcc0ed14660402dc757937f7649dafeb1500991520bca556b57d31ebdff9dcb8e81b2f6742be1821f9e3ed5df1b712557ca2e6b8011f4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

740 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

740 AcroRd32.exe
740 AcroRd32.exe
740 AcroRd32.exe
740 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73242745469175549328576767o 8134927108644858175o 15249034417213o 638071103975426465905298055255o 437.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:740

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/740-55-0x0000000074A31000-0x0000000074A33000-memory.dmp

Filesize
8KB

Download