295fdf721735a303dece1a8c95495ca397602a52e5816f692c11e062faac709a | Triage

Analysis

max time kernel
154s
max time network
121s
platform
windows7_x64
resource
win7-en-20211014
submitted
03-11-2021 11:10

Sharing

Report Analysis Logs

General

Target

open and click nur einen kleinen Teil Ihrer Rücksichtnah me verlangen. Ich setze jetz t große Hoffnungen in Sie.pdf
Size

107KB
MD5

9a37fc4ea1b2a5769ff7bc7e8e9f122c
SHA1

df6c91b51db4343310cf1fcddf8368b3a7907171
SHA256

295fdf721735a303dece1a8c95495ca397602a52e5816f692c11e062faac709a
SHA512

31c4e5f7afb350955a03cb94a0078d82ea0264df7ea950e9e5fcdc38c114eb3a5e62c13f04b76223233122dd18557bb241d06017d418965ce99c9d5227a9acba

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

456 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

456 AcroRd32.exe
456 AcroRd32.exe
456 AcroRd32.exe
456 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click nur einen kleinen Teil Ihrer Rücksichtnah me verlangen. Ich setze jetz t große Hoffnungen in Sie.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:456

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/456-55-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download