fcef2c04c57b989afd63a7316ee1e99db9de2926697619471fdf1034cf8a4d0b | Triage

Analysis

max time kernel
151s
max time network
123s
platform
windows7_x64
resource
win7-en-20211014
submitted
09-11-2021 19:09

Sharing

Report Analysis Logs

General

Target

I just demand a tiny amount of your focus. Have to have your help, seeing that I am tense..pdf
Size

108KB
MD5

43878d952196fcb9137b5d1f5f908228
SHA1

e890145bde735bde09620a94f7bcaab4f2f34faa
SHA256

fcef2c04c57b989afd63a7316ee1e99db9de2926697619471fdf1034cf8a4d0b
SHA512

651c56768df1a203f1cef0482bbb6233f4f0b1e66206e093979af0459dd7252ef36f5ebc534e551c4b2f41f57f548d2ff9875de5677f8e644c549d531a638dbf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe
1600 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\I just demand a tiny amount of your focus. Have to have your help, seeing that I am tense..pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1600

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-55-0x00000000754A1000-0x00000000754A3000-memory.dmp

Filesize
8KB

Download