Analysis
-
max time kernel
160s -
max time network
132s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
04-11-2021 19:09
Behavioral task
behavioral1
Sample
open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf
Resource
win10-en-20210920
General
-
Target
open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf
-
Size
191KB
-
MD5
c8c158162812bb4c4d423c5b328771f6
-
SHA1
d336538baeb336b3d718dc84098b1fb91ef23931
-
SHA256
0748f743adc1aa04a764cf7df30d27309e23c352a68c575764afc41564aee880
-
SHA512
8e0e6f2e53d09095f6481f0e1523b064109757839a541965013eeba1f7e20f094a7000c8e1bbc7e681d6bd1455faed85f83553d43c6f357719399bddfb34547c
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1556 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1556 AcroRd32.exe 1556 AcroRd32.exe 1556 AcroRd32.exe 1556 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\open and click A_kan_ ett bind mæ te den Hiedbrakk[211], hwo r knap en Moldhwalp kafaa æ Fø d, endsej en Menneskbaa'n..pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1556-55-0x00000000758C1000-0x00000000758C3000-memory.dmpFilesize
8KB