aeea638ec8d535f19614d9e0476f3499c6e2b7ec17ae3930616112a14dd991e1 | Triage

Analysis

max time kernel
151s
max time network
118s
platform
windows7_x64
resource
win7-en-20211014
submitted
03-11-2021 19:08

Sharing

Report Analysis Logs

General

Target

open and click Ich weiß, Frauen sollten den Jungs nicht zuerst sc hreiben, aber... Wollen Ihre Unt.pdf
Size

106KB
MD5

445034a64ae2e234c5e0952a63480444
SHA1

75aa31c7e02acc7da0a2994d2e7673e0a5990725
SHA256

aeea638ec8d535f19614d9e0476f3499c6e2b7ec17ae3930616112a14dd991e1
SHA512

214a2e304315c8508fd4f30d4a2dea62092f0def7b01266a9c4c5234a032a2b7123ad28c178b9165098a7304b9cd72acfb0c42d0ff3903ed8b5fb14211303d50

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1248 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1248 AcroRd32.exe
1248 AcroRd32.exe
1248 AcroRd32.exe
1248 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click Ich weiß, Frauen sollten den Jungs nicht zuerst sc hreiben, aber... Wollen Ihre Unt.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1248

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1248-55-0x0000000074F61000-0x0000000074F63000-memory.dmp

Filesize
8KB

Download