Analysis
-
max time kernel
150s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
13/06/2023, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
friendly_balance_reminder_faith_hope_and_charity_recycle_store_inc_061323.pdf
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
friendly_balance_reminder_faith_hope_and_charity_recycle_store_inc_061323.pdf
Resource
win10v2004-20230220-en
General
-
Target
friendly_balance_reminder_faith_hope_and_charity_recycle_store_inc_061323.pdf
-
Size
46KB
-
MD5
a0469b3e2d7fdab58d2b181012478cf7
-
SHA1
02fcfee67dece0758a64fb0dfbba8f1d33ce4ca8
-
SHA256
eb5446152d882185c83cf1504f4fda00bb98580daa4703ae95650e451379b69b
-
SHA512
f82a66a3c3b667dc2edb3dff9e3899754ed560da5843034513712099be51d65d5f837fc891a1c86d4360e5e6fdcb22e11c42f3675ee14a98070b18a83d3f931e
-
SSDEEP
768:CQSMate0dCkhXWT0BqfR9mxlpsxUeVJsp4Y/yw6ZQ99h9OB1R5n0dswuifYqBO:reI7pwZs98R56ZChsB7Z0diiNQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1600 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1600 AcroRd32.exe 1600 AcroRd32.exe 1600 AcroRd32.exe 1600 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\friendly_balance_reminder_faith_hope_and_charity_recycle_store_inc_061323.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1600
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55f3c36991ca885300cb8b5997adfb5af
SHA19520f4ddee11046b9932dd6ab7ebe5e614393581
SHA25649331f8df4ab84f9c6673693460eda9941a56940e2aaa31831049b2f7bcf7973
SHA512f5c846cc8ae5a2420737c3ddbae029080beecc8f6cffbb3ed6f439e5da4c76d99cc83e738d1c68a0a9984f6445243d2496d7ad20896f3aec2eb2a8df251baf07