Analysis
-
max time kernel
150s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
29/09/2022, 09:17
Static task
static1
Behavioral task
behavioral1
Sample
256920d7f684d9ba5dc09ec80f26329380e1c64ca025d7701c91ea6b75d90418.pdf
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
256920d7f684d9ba5dc09ec80f26329380e1c64ca025d7701c91ea6b75d90418.pdf
Resource
win10v2004-20220812-en
General
-
Target
256920d7f684d9ba5dc09ec80f26329380e1c64ca025d7701c91ea6b75d90418.pdf
-
Size
100KB
-
MD5
7648c47e45ee61bf5375c930408520a9
-
SHA1
d27ec4516f929226611f73cf8dd46d67fcbbb74b
-
SHA256
256920d7f684d9ba5dc09ec80f26329380e1c64ca025d7701c91ea6b75d90418
-
SHA512
4534962a258909578b315cf87252f44eb598499bd2839be4a753d8034e93a94476aac16d21e6020e65eb7265aa9be989768befeb0e8491a80782bd957d42dedb
-
SSDEEP
3072:oBmvymTNkV2m6E/gU/+Uwo1QqQji1o1Z74UW2Qh9/:nLTSIm3/P+pLYiXWtr/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 992 AcroRd32.exe 992 AcroRd32.exe 992 AcroRd32.exe 992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\256920d7f684d9ba5dc09ec80f26329380e1c64ca025d7701c91ea6b75d90418.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:992