7873c9f1528f3036919606e8b5b4f7b363948361e9dbbc0ce8e9439897fcbe02 | Triage

Analysis

max time kernel
158s
max time network
119s
platform
windows7_x64
resource
win7-en-20211014
submitted
03-11-2021 19:11

Sharing

Report Analysis Logs

General

Target

open and click Ich kann für bestimmte Frauen sage n, dass sie zunächst nicht an Männer schreiben.pdf
Size

107KB
MD5

af17685ddfbd19efb78ff3fbbe07758c
SHA1

98fb30b341c64bd65346bb99b056fd92c3e296ce
SHA256

7873c9f1528f3036919606e8b5b4f7b363948361e9dbbc0ce8e9439897fcbe02
SHA512

5c663045ca839f6898741d077c6483c303b7a9c59155440efd8e911ea2faf4351c67ee3aa4ff1a468c1c2de8dc00b9a7286fe4d2d87674505460e58c4ec82162

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1152 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1152 AcroRd32.exe
1152 AcroRd32.exe
1152 AcroRd32.exe
1152 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click Ich kann für bestimmte Frauen sage n, dass sie zunächst nicht an Männer schreiben.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1152

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1152-55-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download