63e2245766e58360f64038364f1831a3df2026f070a4639af77130443b872aa6 | Triage

Resubmissions

16-11-2021 12:04

211116-n8q8cadfh8 4

16-11-2021 11:58

211116-n5f8zadfg9 3

16-11-2021 11:55

211116-n3qpmaaffn 4

Analysis

max time kernel
151s
max time network
125s
platform
windows7_x64
resource
win7-en-20211014
submitted
16-11-2021 12:04

Sharing

Report Analysis Logs

General

Target

ModuloConfermaIndirizzo_2016_56.pdf
Size

89KB
MD5

3e4e9232f4a973055eef13a2692ffc54
SHA1

94cc703064b56a0416d884be1bf6a2edb66521c1
SHA256

445f1576ff067209bd366064032e5826ef4b3b0e6b299184443053be75e49289
SHA512

e6958ff09ca3ac3e826ce80d91c319d67390af75632a1012694799999ab9fd6b9a00e147b62fcd681fca76502a0fa2ff345af97e7754d3dea3c4c9611258dca6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

556 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

556 AcroRd32.exe
556 AcroRd32.exe
556 AcroRd32.exe
556 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ModuloConfermaIndirizzo_2016_56.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:556

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/556-55-0x00000000754A1000-0x00000000754A3000-memory.dmp

Filesize
8KB

Download