77b4650847cb0c0389bcbe8feda2807d42d3f59cdd3f2b0b07f8dcc04e904fa4 | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
27-05-2022 20:21

Sharing

Report Analysis Logs

General

Target

APT-Hunter-master/APTHunter.pdf
Size

1.3MB
MD5

8622e712ef414b421cd6422c8c959f86
SHA1

d168dbc45f71ca23de3888c54720240c3f3a0649
SHA256

a86f7bf6fe1eab25c877fdc745a8b696ac86efe145fa42adadbb164f5517ada3
SHA512

c1a741ba5fca7a40da109b9da78177532b15e55e5b6fc0965191e3aa2bc1d12bcdf94642516276c44036f2fa4ce686f5b6db92cdfd851551081ad7032b3343e4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1668 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1668 AcroRd32.exe
1668 AcroRd32.exe
1668 AcroRd32.exe
1668 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\APT-Hunter-master\APTHunter.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1668

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1668-54-0x00000000762C1000-0x00000000762C3000-memory.dmp

Filesize
8KB

Download