74392d915412db6f30a7cd28af95ed00144d78a827521ad5bfcb812cbe9de3b2 | Triage

Analysis

max time kernel
151s
max time network
125s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

— Προς νότον, απήντησ εν ο Αμ ερικανό ς, θα ε ίναι αν άγ.pdf
Size

196KB
MD5

e334cd586d953d2a478673d717f64926
SHA1

1b75421aa0e08be7302fb677a6323aa6de1d0eff
SHA256

74392d915412db6f30a7cd28af95ed00144d78a827521ad5bfcb812cbe9de3b2
SHA512

635aca992ae95dce82be96eb5c6fa17aa077a9bd7d2615aedea8ab7debc9f2c6b0bee1306e1ca1d309a71e19a0d37cb33166f3bd7d3dc7396148a723da097f7c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1256 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1256 AcroRd32.exe
1256 AcroRd32.exe
1256 AcroRd32.exe
1256 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\— Προς νότον, απήντησ εν ο Αμ ερικανό ς, θα ε ίναι αν άγ.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1256

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1256-55-0x0000000075B71000-0x0000000075B73000-memory.dmp

Filesize
8KB

Download