a433468470fba4fdf9f5db1ce40741bd1dbca4c762abc360d6ebf2b80e474950 | Triage

Analysis

max time kernel
152s
max time network
119s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:15

Sharing

Report Analysis Logs

General

Target

Δεν εφα ρμόζεται λοιπόν ειμή εις την κυρ ίως λεγο μέν�.pdf
Size

197KB
MD5

4729f6f69a5c40f8046debe369b8344f
SHA1

d8f04dd2691f3c695b7339fa87661b8f5ba71b33
SHA256

a433468470fba4fdf9f5db1ce40741bd1dbca4c762abc360d6ebf2b80e474950
SHA512

37e37a272c854312ffebe83b06de4280eeffdf5dd7b90b9806d72001e0f57a224387277a8ea77be48cfd0c01aa29ddc352b371a78a88a528cbf98e21fac20d28

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1512 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1512 AcroRd32.exe
1512 AcroRd32.exe
1512 AcroRd32.exe
1512 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Δεν εφα ρμόζεται λοιπόν ειμή εις την κυρ ίως λεγο μέν�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1512

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1512-55-0x0000000076A21000-0x0000000076A23000-memory.dmp

Filesize
8KB

Download