a98470eb4bb25b34cca26aeb560c2e3fcfe1ce81f359433cc733728ee15c599e | Triage

Analysis

max time kernel
159s
max time network
128s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Εκ τούτου εγ εννώντ ο φιλον ικίαι, πολλάκ ις μάλ ιστα δ�.pdf
Size

201KB
MD5

06ce564d8ee4a6d8ec06115a012bc077
SHA1

710db2ea697bdb4327f8115551783867cad95749
SHA256

a98470eb4bb25b34cca26aeb560c2e3fcfe1ce81f359433cc733728ee15c599e
SHA512

7c545033b5d875ab27100f171808b803663bad45576ca846ddcc217588d42870803c103c4f6e9ca50827657a4db03d179a5157cadc23fa3dbd5ca3bce4df18b7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1872 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1872 AcroRd32.exe
1872 AcroRd32.exe
1872 AcroRd32.exe
1872 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Εκ τούτου εγ εννώντ ο φιλον ικίαι, πολλάκ ις μάλ ιστα δ�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1872

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1872-55-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download