Analysis
-
max time kernel
150s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
13-09-2022 18:45
Behavioral task
behavioral1
Sample
c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf
Resource
win10v2004-20220901-en
General
-
Target
c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf
-
Size
3.2MB
-
MD5
e1cf75e2bac01556b11aeeb6f14bdf75
-
SHA1
0f950937b49f6825ddf8090e777d6fbd6c63f40b
-
SHA256
c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5
-
SHA512
2137018a09cd370ddd4c84682f1b874e8162bd174f0ebb9df8e99534c7b5d0687e475a984b2b8d5eb5358908f0ef3972b8dc904ebba32a7e7729dfb34a4fd398
-
SSDEEP
98304:lAo7XU2jxH5OONPe2RScaat70ClmOKmcRQL1wPhQ8PX:qSE2jxH5OOZaE70PwcO5CQ8PX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 812 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
Processes:
AcroRd32.exepid process 812 AcroRd32.exe 812 AcroRd32.exe 812 AcroRd32.exe 812 AcroRd32.exe 812 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:812