001f329a99a84175ebadb671170482baeef0338807e93f399825381e58807f37 | Triage

Analysis

max time kernel
161s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
30-01-2022 17:11

Sharing

Report Analysis Logs

General

Target

[email protected]/20_10_2021_01_6101_21____________________________.pdf
Size

791KB
MD5

cb6a17f8b475ad25f1f9ba494a57471a
SHA1

1543d5d4251174300c4262ce7e0d18982a9518b0
SHA256

f56f295ed4775a8f07376ab47e624c82996d702f03907f4200f2030a8be5608e
SHA512

7cce042dba8474ad31ca079444d1aab623bbf353968a3c25ee4ca9cfd354469b36600b90238950753a13e2caa0ce24b5aa4dd23792e113453434481ab9a3ec93

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1608 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1608 AcroRd32.exe
1608 AcroRd32.exe
1608 AcroRd32.exe
1608 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[email protected]\20_10_2021_01_6101_21____________________________.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1608-54-0x0000000075471000-0x0000000075473000-memory.dmp

Filesize
8KB

Download