bbe8c0c9ca46e9a1ef548711e09e35db3f23f897596565879e73096e8c2fb00e | Triage

Analysis

max time kernel
152s
max time network
127s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Εννοείται ότι η κυρ ία Βέλδων έβλεπε πά ντοτε μετ ά με�.pdf
Size

198KB
MD5

8758203a408b58eea51647b3b5a49fc2
SHA1

3e1cebc94c0e52e1cba8d1ebeb02420f062453ac
SHA256

bbe8c0c9ca46e9a1ef548711e09e35db3f23f897596565879e73096e8c2fb00e
SHA512

9ede227be05895c3e049def747879d363d9ec5f85e6f2a231a413d7cf60a1307ad6382304518295e2e6b1ad5ddf0512b756662f0c94ab4e0f626b46f464745cc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1296 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1296 AcroRd32.exe
1296 AcroRd32.exe
1296 AcroRd32.exe
1296 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Εννοείται ότι η κυρ ία Βέλδων έβλεπε πά ντοτε μετ ά με�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1296

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1296-55-0x0000000075D61000-0x0000000075D63000-memory.dmp

Filesize
8KB

Download