2e1092e8340ca4c2f8f19a8872e5c50ba3211ac4b80287f2ed955948ab75d504 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20211104
submitted
07-11-2021 19:09

Sharing

Report Analysis Logs

General

Target

89130906241718640435121o 4081172573531625o 05936553095903163145711539550o 143715542093842982859o 240.pdf
Size

129KB
MD5

851fcdf6d5424266a15de4c7b8432b30
SHA1

a1f1b059c4154c4cff48635922dd9c5bf113f16a
SHA256

2e1092e8340ca4c2f8f19a8872e5c50ba3211ac4b80287f2ed955948ab75d504
SHA512

5db8dd1c32e97f38d6b84398cbc14b14643cc01551455afce18b9ea9868e7b617fbfab307824e84da68611e714fe2539650706b574d5a7f472ba353806f7c1ff

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

664 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

664 AcroRd32.exe
664 AcroRd32.exe
664 AcroRd32.exe
664 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\89130906241718640435121o 4081172573531625o 05936553095903163145711539550o 143715542093842982859o 240.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:664

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/664-55-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download