3d9f1d0e2859f4461493ab76bc43fa6a6aeef4fd5705d52a0a811b7147b33a72 | Triage

Analysis

max time kernel
155s
max time network
117s
platform
windows7_x64
resource
win7-en-20211014
submitted
07-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

69499109881533289235890847809o 30431857119944694o 1623677356090391850347o 28338091600886o 7577019894.pdf
Size

130KB
MD5

215fb481cbd7bc00c2aa74d599bbf898
SHA1

081a09ea874651d299f7a466135164f4f964258b
SHA256

3d9f1d0e2859f4461493ab76bc43fa6a6aeef4fd5705d52a0a811b7147b33a72
SHA512

6189d5e6f9aa082ee316eadd1ce29753ca57bdae03482dd4d133ff93765f796f245c91056e0630aff683d2d37441c7f3abb344b9b17297f30ed59a9f72d2a2d6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1828 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1828 AcroRd32.exe
1828 AcroRd32.exe
1828 AcroRd32.exe
1828 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69499109881533289235890847809o 30431857119944694o 1623677356090391850347o 28338091600886o 7577019894.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1828

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1828-55-0x0000000075D41000-0x0000000075D43000-memory.dmp

Filesize
8KB

Download