c69ba0c16f1cd4d4b57ce16ad8da0f4e1cfa3e41cda543add2f2706131fddb43 | Triage

Analysis

max time kernel
152s
max time network
133s
platform
windows7_x64
resource
win7-en-20211014
submitted
03-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

open and click Ich weiß wirklich, dass Damen an fangs keine Botschaften an Männer senden sollten ,.pdf
Size

175KB
MD5

4b5184d0d394a33283d289bf7bfc0a1a
SHA1

17ab3a20c91f4070688a855becb38a6d3e91cd18
SHA256

c69ba0c16f1cd4d4b57ce16ad8da0f4e1cfa3e41cda543add2f2706131fddb43
SHA512

7764a93d9fbc90f394cfeba5d97fdd3e7f6209447979224805d1b991e571610ba2fb5dfdba58459fa49f18dd81ce7b453471b136142c71dd43e927da8d123903

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click Ich weiß wirklich, dass Damen an fangs keine Botschaften an Männer senden sollten ,.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1600

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-55-0x00000000754A1000-0x00000000754A3000-memory.dmp

Filesize
8KB

Download