Analysis
-
max time kernel
150s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
04/07/2023, 21:35
Static task
static1
Behavioral task
behavioral1
Sample
45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf
Resource
win10v2004-20230621-en
General
-
Target
45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf
-
Size
1.2MB
-
MD5
e68fc4d584d284585a01fff009b4a886
-
SHA1
820e1b45743bab21faa93a137a9ae93d9196e7a2
-
SHA256
45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb
-
SHA512
d5fc15615a0638cc008dd61c955461dcafa6d1852b0b14a2884f020d30d76ad7027ff12d2a8cc2528c64c29e9e5066f6bd5b1d87e0d74f91915f813288767595
-
SSDEEP
24576:bKNCwoay7FbDV0Ltq+KFq0nMy7cM9wHRtG+Bmtn96BwBO4:i8BbDV8tqvFXMXM6x4+92O4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2404 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2404 AcroRd32.exe 2404 AcroRd32.exe 2404 AcroRd32.exe 2404 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2404
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ce1dfe766b6aa6c164ecdcf3b4f2c94e
SHA187da8d0cb46a9e8463ecfa53f0ccf2cead200d73
SHA256d86a460df2a2afefd20ed808adb174f87c172d9afac42debc6004c58bb153a1e
SHA512c839773c7bc691827cb5557ecde22f8f6e279db9bfcc10dabd8d38829f61dd9a4c94f9614b0a98c3f1ef454b80135de35e51d72e53272ead0ad9cf45393b0c74