e01217fa7a851269982424ba577e6f6861e7b14854bc4238c018611f70d63d80 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:15

Sharing

Report Analysis Logs

General

Target

Την ημέρα ν εκείνην από της π ρωίας ο Δι κ Σανδ εί δε με�.pdf
Size

199KB
MD5

779f94cf0d5be854f807b30ae147eaaf
SHA1

0e1bc0b87ae6d5dcb6248ad6355ef4c9eaeb2b7b
SHA256

e01217fa7a851269982424ba577e6f6861e7b14854bc4238c018611f70d63d80
SHA512

00e34573ba8b489e4bbacbe4dfd71146ac965d7d8901f76c1febe1d6a5cbd1000c40023a4e71b4feb640079204b822a638e65522738eb431b5b19a5aac5a9f17

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1648 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1648 AcroRd32.exe
1648 AcroRd32.exe
1648 AcroRd32.exe
1648 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Την ημέρα ν εκείνην από της π ρωίας ο Δι κ Σανδ εί δε με�.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1648

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1648-55-0x0000000075A01000-0x0000000075A03000-memory.dmp

Filesize
8KB

Download