a200d7dc6f26264ff2376a879233025b63992befc9810cdf95f57e202ac6482c | Triage

Analysis

max time kernel
151s
max time network
120s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

Ο Δικ Σανδ ή ρχισε ν' ανησ υχή. 050772925932o 908701 177505676o 0624774516881.pdf
Size

121KB
MD5

d69752eefdda50309a865e795a5a889e
SHA1

1c088e93e312a51e50096a5966ee772d600bfb12
SHA256

a200d7dc6f26264ff2376a879233025b63992befc9810cdf95f57e202ac6482c
SHA512

b6f73b24e85aaa7f4e9505a14106d1d76722abcdf8cc273a571f7720460386ae80cc085a6eb9925145692e4d024f5e91df8495bfb22c344191a8d0032d05a83a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1772 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1772 AcroRd32.exe
1772 AcroRd32.exe
1772 AcroRd32.exe
1772 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Ο Δικ Σανδ ή ρχισε ν' ανησ υχή. 050772925932o 908701 177505676o 0624774516881.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1772

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1772-55-0x0000000075321000-0x0000000075323000-memory.dmp

Filesize
8KB

Download