c92e3da86fa1ab33150876d994688c78a6bd97269af2af1bef8fd5a5193dc507 | Triage

Analysis

max time kernel
149s
max time network
136s
platform
windows7_x64
resource
win7-en-20210920
submitted
03-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

open and click Ich brauche Ihre Hilfe, da ich wirklic h besorgt bin Wollen Ihre Hilfe, da ich nervös bin.pdf
Size

108KB
MD5

24048b97525040337e62a0618ac3543c
SHA1

a4eba8edf05111849914f1b5d91a646673a88eac
SHA256

c92e3da86fa1ab33150876d994688c78a6bd97269af2af1bef8fd5a5193dc507
SHA512

e1463a1112f538e2cb08c47d7d6f55bb56da25acd57855cb0c21945662d8e3df5ba2b1cf1429197bde9c44a0c4e5d6122fbc648de8af3fd5be368af6451efe8f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click Ich brauche Ihre Hilfe, da ich wirklic h besorgt bin Wollen Ihre Hilfe, da ich nervös bin.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x00000000759B1000-0x00000000759B3000-memory.dmp

Filesize
8KB

Download