d23a5512cb3a79a0094bc0d3ae91f9b94f8aab5cedfe17c32d832193354ab854 | Triage

Analysis

max time kernel
151s
max time network
119s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Τέλος της βροχεράς εποχής μ ετά του μη νός Απριλ ίου ή�.pdf
Size

195KB
MD5

fe2b47a59ee364906af8934549c279e8
SHA1

d3e9b574aef4bf23436d0d2d9ebe8ee211023f27
SHA256

d23a5512cb3a79a0094bc0d3ae91f9b94f8aab5cedfe17c32d832193354ab854
SHA512

c5f48704e7bb72534b5d3d2ab7c9561d87db60ab53971ba84a4e52c2daee63a868a936b4a397300132d323d4e9881fb7dd498f9d97262874a25359ba8f2b48a6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

768 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

768 AcroRd32.exe
768 AcroRd32.exe
768 AcroRd32.exe
768 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Τέλος της βροχεράς εποχής μ ετά του μη νός Απριλ ίου ή�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:768

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/768-55-0x0000000075A01000-0x0000000075A03000-memory.dmp

Filesize
8KB

Download