Analysis

  • max time kernel
    160s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-en-20211014
  • submitted
    04-11-2021 19:09

General

  • Target

    open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf

  • Size

    191KB

  • MD5

    c8c158162812bb4c4d423c5b328771f6

  • SHA1

    d336538baeb336b3d718dc84098b1fb91ef23931

  • SHA256

    0748f743adc1aa04a764cf7df30d27309e23c352a68c575764afc41564aee880

  • SHA512

    8e0e6f2e53d09095f6481f0e1523b064109757839a541965013eeba1f7e20f094a7000c8e1bbc7e681d6bd1455faed85f83553d43c6f357719399bddfb34547c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1556-55-0x00000000758C1000-0x00000000758C3000-memory.dmp
    Filesize

    8KB