f107d1a4d37eb1362d6ab5411858ef9b9d227bcc92befc5f1f9008efc46470e5 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
03-11-2021 03:09

Sharing

Report Analysis Logs

General

Target

Unhappy Singlemom Private Contact From Tinder.pdf
Size

127KB
MD5

3d92c2bf77789e710f2a8cda351b6f44
SHA1

00c5f6b02931c01ef9cd78c135a9bf5610dcaec0
SHA256

f107d1a4d37eb1362d6ab5411858ef9b9d227bcc92befc5f1f9008efc46470e5
SHA512

a09f87c67f619355d285b3dc9453fce47c74cc4f8b9a8029452bf4453ee43c73937ddea4c13fd5fb8ae3b4b689d69dff517e28aa278f70645c13caa71df783f6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

576 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

576 AcroRd32.exe
576 AcroRd32.exe
576 AcroRd32.exe
576 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Unhappy Singlemom Private Contact From Tinder.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:576

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/576-55-0x0000000075C21000-0x0000000075C23000-memory.dmp

Filesize
8KB

Download