Resubmissions
14/07/2023, 20:45
230714-zj8lwagh8z 314/07/2023, 20:14
230714-y1haksgh4z 314/07/2023, 20:07
230714-yv9smsfh99 3Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
14/07/2023, 20:07
Behavioral task
behavioral1
Sample
36f7d9a22d1837ebd8a1fa31b2549fb16b6511d7d5a0772d46a6889af2b2ae4e.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
36f7d9a22d1837ebd8a1fa31b2549fb16b6511d7d5a0772d46a6889af2b2ae4e.pdf
Resource
win10v2004-20230703-en
General
-
Target
36f7d9a22d1837ebd8a1fa31b2549fb16b6511d7d5a0772d46a6889af2b2ae4e.pdf
-
Size
460KB
-
MD5
34727c56257d4d2f40db48a680839d6d
-
SHA1
34f4513d63782a2f76760d9f07aca4ac439c5aa8
-
SHA256
36f7d9a22d1837ebd8a1fa31b2549fb16b6511d7d5a0772d46a6889af2b2ae4e
-
SHA512
4165b6d74e4b5cb538b29d8d04177b5fad313e4bce495cebd72c5cbd71b1b6d991926a643752bbec558cda4415940bdbca25b0c04cbfb23940cba49040fc0c2e
-
SSDEEP
12288:onp+UV8EVEHbT1kQENEv4sSQjFbRyc3F10uo7t:onpXq1k64sS8cZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2192 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36f7d9a22d1837ebd8a1fa31b2549fb16b6511d7d5a0772d46a6889af2b2ae4e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5336cc6fc9d1cfeeec4557d7763097f3d
SHA120c82451e9bccfb727a60e6492f4f98aea9a8af2
SHA25681162eeb0bb8c9330a934f9d27b6fac684bb4bea2fc36b359536c75ba714f582
SHA5120c9ca7d377f0322949e1bf77ea4c5576143592af37de582e2a6a0201c98bd60f4924fe37579c3b3e5532d1fd03d7a661bd143fa07941ba62dcdab0ce05d844f2