d69051c8c298b9231bf8a9247cd43a7b75c45bdea5f6b9fcb7476ed623da2e28 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-en-20211104
submitted
23-11-2021 05:09

Sharing

Report Analysis Logs

General

Target

Wire Payment Details.pdf
Size

106KB
MD5

b3bc8c141f07acf4c4686651398d460e
SHA1

a3b91d8a4e476887075faf1c1088dd1e7ebcc055
SHA256

cdffa93237c40c411cfbedda0db9e2a42cb9dcfb584719a4b2424e28ae6069a0
SHA512

2f39f8862faa869d331aff64ca0d6e2b06e57fd2af4fcca40a690493f26781ebef6b815c5709dac24a29663f2233b1d1ffe2f43eaff11bf3fe8a3923c74a5397

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

764 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

764 AcroRd32.exe
764 AcroRd32.exe
764 AcroRd32.exe
764 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Wire Payment Details.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:764

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/764-55-0x0000000076A21000-0x0000000076A23000-memory.dmp

Filesize
8KB

Download