88bdafb9340c5c7ffd4e90266d5d3c71f392e999727b8f6ee8b3733580895de6 | Triage

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
11-11-2021 11:11

Sharing

Report Analysis Logs

General

Target

Fah_20211111024747.pdf
Size

8KB
MD5

d01bf4b67f3959b2f011aadc47e9345c
SHA1

35d69bbd4c49f2b00c5e3f065274b9ec2a42e192
SHA256

88bdafb9340c5c7ffd4e90266d5d3c71f392e999727b8f6ee8b3733580895de6
SHA512

346b381b7668045e3a4bc2edebf71861fa76e59c7e2840d36fb46e4e2627ee91babfefff7fddc842794f1724199941b2458d7a6bf927f7bb8f98ec04bf981f19

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Fah_20211111024747.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1120

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1120-55-0x00000000758C1000-0x00000000758C3000-memory.dmp

Filesize
8KB

Download