Analysis
- max time kernel
89s - max time network
18s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
- submitted
22/08/2024, 02:35
General
- Target PHISHING EMAIL SCAM ALERT - Midea 2024.pdf
- Size 389KB
- Sample240822-c2575svalf
- SHA256 a1ab2444e344b62b37054748a0b1355f0c5e48bd710f2628ebaedcb178292970
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PHISHING EMAIL SCAM ALERT - Midea 2024.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
A9RC6EA.tmp
addressbook.acrodata
SharedDataEvents
memory/2076-0-0x0000000003C20000-0x0000000003C96000-memory.dmp
memory/2076-54-0x0000000002A40000-0x0000000002A4A000-memory.dmp
memory/2076-53-0x0000000002A40000-0x0000000002A4A000-memory.dmp
memory/2076-63-0x0000000002A40000-0x0000000002A4A000-memory.dmp