d4bf28b51c54e46f22e111a793e5ebdca42a8a4eadc881a5e5658a9745774db4 | Triage

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:12

Sharing

Report Analysis Logs

General

Target

Παχεία ι σταγ όνες χ ιόνος έ πιπτον επί τ ου εδάφους. 4 160.pdf
Size

200KB
MD5

2fd86a06c263193dfddcb321d33cba4c
SHA1

d07f3edb612eb8768749f9d605e90059cac4dc1d
SHA256

d4bf28b51c54e46f22e111a793e5ebdca42a8a4eadc881a5e5658a9745774db4
SHA512

c36a0a67f25409dc303e02b42db55bf876f2b0ed23d18be74851f212176a88d4c8aea32f33511dd242f3059004e7b54922e5923ae40ecde6eadbf012c06846ae

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

600 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

600 AcroRd32.exe
600 AcroRd32.exe
600 AcroRd32.exe
600 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Παχεία ι σταγ όνες χ ιόνος έ πιπτον επί τ ου εδάφους. 4 160.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:600

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/600-55-0x00000000763C1000-0x00000000763C3000-memory.dmp

Filesize
8KB

Download