d4ef8c7e80b516c7988ece6693cf181867d2e2a047e0d177850814389d3ba14a | Triage

Analysis

max time kernel
155s
max time network
118s
platform
windows7_x64
resource
win7-en-20211104
submitted
08-11-2021 19:16

Sharing

Report Analysis Logs

General

Target

Ο έμπι στος το υ Αλβέζ έπεσε δέκα βή ματα μα κράν. 44215140.pdf
Size

120KB
MD5

fee3a50fd9316d7c0c1b993d166f8ac4
SHA1

a690fc1bcfee24b6473121544d584d96b948dfb3
SHA256

d4ef8c7e80b516c7988ece6693cf181867d2e2a047e0d177850814389d3ba14a
SHA512

575263bff76ec843c5581e3bb4fcc98a711faf1140168f10d2d2ead34aacc883a880efdf92c3b9b8c98aecffc612f00315bfff4984a63884622eb9caf985c579

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

564 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

564 AcroRd32.exe
564 AcroRd32.exe
564 AcroRd32.exe
564 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Ο έμπι στος το υ Αλβέζ έπεσε δέκα βή ματα μα κράν. 44215140.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:564

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/564-55-0x0000000076171000-0x0000000076173000-memory.dmp

Filesize
8KB

Download