abf64160891190893080484beaf65b38e903220c2283ebcc487dbadfa7dd37ee | Triage

Analysis

max time kernel
137s
max time network
43s
platform
windows7_x64
resource
win7-20220414-en
submitted
18-05-2022 19:12

Sharing

Report Analysis Logs

General

Target

Odyssey Reinsurance Company.pdf
Size

521KB
MD5

ac0c755eae39aae5f6b9bbef7d5980f7
SHA1

256d48a7dfa6eb70e75c082b1fcad854f4260ba2
SHA256

abf64160891190893080484beaf65b38e903220c2283ebcc487dbadfa7dd37ee
SHA512

00b6c57f05de40858ddb7155121f3a26b111de5b4f003c5b21a05633295442aefb0996041eedfb13b7975b5188d9c408edb5acb0f24d26639172d126e82cdabc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1520 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1520 AcroRd32.exe
1520 AcroRd32.exe
1520 AcroRd32.exe
1520 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Odyssey Reinsurance Company.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1520

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-54-0x0000000076451000-0x0000000076453000-memory.dmp

Filesize
8KB

Download