538fb4b8aac841c90d051df1bd830e8d3c572cce3ed9dc5122e0afe35f987317 | Triage

Analysis

max time kernel
151s
max time network
123s
platform
windows7_x64
resource
win7-en-20211104
submitted
17-11-2021 06:57

Sharing

Report Analysis Logs

General

Target

Module 2.2 in Arts 3 .pdf
Size

313KB
MD5

d31c36f449224aaf413d3e3e945fc5b9
SHA1

3336eb02a14bf2dac920e5fd797a87756b027b23
SHA256

effda2214b98fc693dfbd1e8e2ae28722fafa3b85c5157d0302b738de3b8b684
SHA512

db301be4d996c7263ba9ca3b5efbab4ca5e190feee589938cfb7b473e8b09ae038b392ca19395671a30ce1bc605db87b43f8571163f9e44bbc6714e4c5cf5f0e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1840 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1840 AcroRd32.exe
1840 AcroRd32.exe
1840 AcroRd32.exe
1840 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Module 2.2 in Arts 3 .pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1840

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1840-55-0x0000000075A61000-0x0000000075A63000-memory.dmp

Filesize
8KB

Download