67cb1de35d762022470f4b68d066825e3cd419d8b76203ef42f39d56cdbb8757 | Triage

Analysis

max time kernel
151s
max time network
121s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

Ο Δικ Σανδ ε ίδε τούτα πά ντα ως εν ασ τραπή. 116336 18050333500967.pdf
Size

202KB
MD5

2ffa2ad3938c2c1d1019811c87382e02
SHA1

75dc80bb69b8683b7c6504cda2804fbccf1a4306
SHA256

67cb1de35d762022470f4b68d066825e3cd419d8b76203ef42f39d56cdbb8757
SHA512

93ba5864644f9297afe9c870b8aab676c9ec4b28e19a4b93f59cef80b36c1891b034790a239274a0be784a9a69b99d25554f671b564bd2d0a8bf83cb931375d4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1116 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1116 AcroRd32.exe
1116 AcroRd32.exe
1116 AcroRd32.exe
1116 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Ο Δικ Σανδ ε ίδε τούτα πά ντα ως εν ασ τραπή. 116336 18050333500967.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1116

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1116-55-0x0000000076231000-0x0000000076233000-memory.dmp

Filesize
8KB

Download