607d02115a8c440fe8fcd9a4f7aed7abdf71e8eccc1fb352c372a431354dc858 | Triage

Analysis

max time kernel
152s
max time network
130s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Αφού δι ήλθε το Ούγογον, συνήντη σε το σώ μα του Λ ιβιγ�.pdf
Size

122KB
MD5

a716b24d341c8d554e6f9085789980cb
SHA1

c3e3dfa784a09ca2c3509e18ec7d362668e2d60e
SHA256

607d02115a8c440fe8fcd9a4f7aed7abdf71e8eccc1fb352c372a431354dc858
SHA512

32832cb52d99f2604a9cd93056d357d9c1ec8a028eeba3416a356b0b845d577498970fbb82174969e8d8380d68051ad97aa31bbee7f647bdabdf1e65221f20b0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

776 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

776 AcroRd32.exe
776 AcroRd32.exe
776 AcroRd32.exe
776 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Αφού δι ήλθε το Ούγογον, συνήντη σε το σώ μα του Λ ιβιγ�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:776

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/776-55-0x0000000074E51000-0x0000000074E53000-memory.dmp

Filesize
8KB

Download