9047ae610009e161690cbb7387a1509cd8c869c970686646a809ecf3cf6e0b4e | Triage

Analysis

max time kernel
155s
max time network
119s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:15

Sharing

Report Analysis Logs

General

Target

Δώδεκα η μερών οδο ιπορία, δ ώδεκα νυκ τών στάθμ ευσις ε.pdf
Size

199KB
MD5

46c6b07bf3ed1e733fd08bf301905aeb
SHA1

f748ee2e79f4a36e72aea4bcf72b8a046b27b8a8
SHA256

9047ae610009e161690cbb7387a1509cd8c869c970686646a809ecf3cf6e0b4e
SHA512

b6cd9a616b8b4cb95f576bd982505d00dc8b1ed19da3a004b2216de0e1879db0c323bd3ae2c900ea05472f461477b87b2d4bc102cd695169449904dbc9bbf37f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

864 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Δώδεκα η μερών οδο ιπορία, δ ώδεκα νυκ τών στάθμ ευσις ε.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:864

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/864-55-0x0000000075851000-0x0000000075853000-memory.dmp

Filesize
8KB

Download