Overview
overview
3Static
static
3MARSEILLE ...NR.pdf
windows7_x64
1MARSEILLE ...NR.pdf
windows10-2004_x64
1MARSEILLE ...NR.pdf
windows7_x64
1MARSEILLE ...NR.pdf
windows10-2004_x64
1=?iso-8859...22.pdf
windows7_x64
1=?iso-8859...22.pdf
windows10-2004_x64
1=?iso-8859...).xlsx
windows7_x64
1=?iso-8859...).xlsx
windows10-2004_x64
1Analysis
-
max time kernel
150s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220331-en -
submitted
11-04-2022 13:49
Behavioral task
behavioral1
Sample
MARSEILLE - EDF - 10144268423- NR.pdf
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
MARSEILLE - EDF - 10144268423- NR.pdf
Resource
win10v2004-20220331-en
Behavioral task
behavioral3
Sample
MARSEILLE - EDF - 10146008309- NR.pdf
Resource
win7-20220311-en
Behavioral task
behavioral4
Sample
MARSEILLE - EDF - 10146008309- NR.pdf
Resource
win10v2004-20220331-en
Behavioral task
behavioral5
Sample
=?iso-8859-1?Q?500300_-_ARC_GLOBAL_II_MARSEILLE_-_Relev=E9_Bancaire_Mars_?= =?iso-8859-1?Q?2022.pdf
Resource
win7-20220331-en
Behavioral task
behavioral6
Sample
=?iso-8859-1?Q?500300_-_ARC_GLOBAL_II_MARSEILLE_-_Relev=E9_Bancaire_Mars_?= =?iso-8859-1?Q?2022.pdf
Resource
win10v2004-en-20220113
Behavioral task
behavioral7
Sample
=?iso-8859-1?Q?ARCMAR_-_=C9tat_des_paiements_-_03.2022_(1).xlsx
Resource
win7-20220331-en
Behavioral task
behavioral8
Sample
=?iso-8859-1?Q?ARCMAR_-_=C9tat_des_paiements_-_03.2022_(1).xlsx
Resource
win10v2004-en-20220113
General
-
Target
MARSEILLE - EDF - 10144268423- NR.pdf
-
Size
115KB
-
MD5
a5fc8a031f94d8a6a8f8e3249ed931b3
-
SHA1
71738a1315cd793a6878250d1dfe47c7ecbe9e22
-
SHA256
928472cd50faae9edacbd789831cacc6ca89a3f1149fcd61f5384ea2ac820f3f
-
SHA512
4ffbed441d53e7d23baa73cea9e3cf1f054486f2cb67a41c848bcfaefa552148b363733d56ea13b47022c1ccc84acf9ec851d1be1a083f3881e0b9ec886f2e21
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1892 AcroRd32.exe 1892 AcroRd32.exe 1892 AcroRd32.exe 1892 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1892-54-0x0000000075D51000-0x0000000075D53000-memory.dmpFilesize
8KB