You Have A New Private message From Tinder For secret .pdf

General
Target

You Have A New Private message From Tinder For secret .pdf

Filesize

119KB

Completed

26-09-2021 12:23

Score
1 /10
MD5

7800d130a35d0eb0e48a50f103c96b72

SHA1

9e9d64d41a17142c22375afd67615571e3ae526d

SHA256

0042e9fbb77018aba2d376d109febc595dd1f86984f6200816c4ccb28a34f4a3

Malware Config
Signatures 2

Filter: none

  • Suspicious behavior: GetForegroundWindowSpam
    AcroRd32.exe

    Reported IOCs

    pidprocess
    2000AcroRd32.exe
  • Suspicious use of SetWindowsHookEx
    AcroRd32.exe

    Reported IOCs

    pidprocess
    2000AcroRd32.exe
    2000AcroRd32.exe
    2000AcroRd32.exe
    2000AcroRd32.exe
Processes 1
  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\You Have A New Private message From Tinder For secret .pdf"
    Suspicious behavior: GetForegroundWindowSpam
    Suspicious use of SetWindowsHookEx
    PID:2000
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • memory/2000-60-0x0000000075D11000-0x0000000075D13000-memory.dmp