Analysis
-
max time kernel
153s -
max time network
126s -
platform
windows7_x64 -
resource
win7-en-20211104 -
submitted
07-11-2021 19:09
Behavioral task
behavioral1
Sample
16497095514926727987586994o 15704835629697o 3937203274918992343483o 16315388275889560706850o 2630389.pdf
Resource
win7-en-20211104
Behavioral task
behavioral2
Sample
16497095514926727987586994o 15704835629697o 3937203274918992343483o 16315388275889560706850o 2630389.pdf
Resource
win10-en-20211014
General
-
Target
16497095514926727987586994o 15704835629697o 3937203274918992343483o 16315388275889560706850o 2630389.pdf
-
Size
205KB
-
MD5
6a55767fa3340107a61504cf2ebbb61d
-
SHA1
c55537a9d1fe324c905d0ba6a66678a056669efd
-
SHA256
cffedf4c0ab0eca09e10e5ef57bd7a7e86eaf0de866bea7e7e5f24800da5c0f6
-
SHA512
edd9fc38ea18ba19af8de9d61472ca54003665777375776911134d56f4c1a4f818e6a1c52ec7683782be5f6eff1bfb511096335eb2deebd3ccc46699996cf91c
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 600 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 600 AcroRd32.exe 600 AcroRd32.exe 600 AcroRd32.exe 600 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16497095514926727987586994o 15704835629697o 3937203274918992343483o 16315388275889560706850o 2630389.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/600-55-0x0000000074F01000-0x0000000074F03000-memory.dmpFilesize
8KB