d94caec3e90c07295d6c25a55e443535cacf5a5ffdbfbfbb26c1d27f3f238331 | Triage

Analysis

max time kernel
151s
max time network
123s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

ΔΙΚ ΣΑΝΔΕ ν τούτοις η θάλασσ α ήτο καλή , και εξα ιρέσει.pdf
Size

122KB
MD5

e45b65bddf9011faeab6ec98c254d4d3
SHA1

adbf4eedae4d7d98d688cbf3ca92fc09d54b8fb5
SHA256

d94caec3e90c07295d6c25a55e443535cacf5a5ffdbfbfbb26c1d27f3f238331
SHA512

c262d2baf1c40e24cea49ebfd74eddaac3c67f225e59d66b0bc23f3db1840bd48b9c7a6bcc5612e135e3b2d9fcc7bbabfd91492103a8fff7bc32178abc7f0b6b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1540 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1540 AcroRd32.exe
1540 AcroRd32.exe
1540 AcroRd32.exe
1540 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ΔΙΚ ΣΑΝΔΕ ν τούτοις η θάλασσ α ήτο καλή , και εξα ιρέσει.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1540

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1540-55-0x00000000754A1000-0x00000000754A3000-memory.dmp

Filesize
8KB

Download