78a07509da2603136805c5382bdd34eff3c5e39d65ad4d530d933e96dba626d4 | Triage

Analysis

max time kernel
155s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Ατμόπλ οιόν τ ι έμελλε να αποπλε ύση δι ά τον ισθμόν το.pdf
Size

122KB
MD5

f25c8f5e1937f07439fef86379718ecd
SHA1

fc3ec97bb01e851c509f6d2271dbffcacc82e025
SHA256

78a07509da2603136805c5382bdd34eff3c5e39d65ad4d530d933e96dba626d4
SHA512

5fad431b6af2fa2f81b5f507006bc9db7d83813d22806361dd936c4e6402012e0a7dda5afadbfd7a92f79b7d16a32017adc0208d7ca55d54b1abb1df33fa6161

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1388 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1388 AcroRd32.exe
1388 AcroRd32.exe
1388 AcroRd32.exe
1388 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Ατμόπλ οιόν τ ι έμελλε να αποπλε ύση δι ά τον ισθμόν το.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1388

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1388-55-0x0000000075B71000-0x0000000075B73000-memory.dmp

Filesize
8KB

Download