Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
04/08/2023, 11:49
Static task
static1
Behavioral task
behavioral1
Sample
43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf
Resource
win10v2004-20230703-en
General
-
Target
43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf
-
Size
68KB
-
MD5
241421c6b30541e51e74f4aa9e65accb
-
SHA1
0bcea4fc28615f6c45381ef309503e5146b615ae
-
SHA256
43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441
-
SHA512
c2d9dc349c05d062d998a037b9b5556a0fc1956ea93af34b95952c4b70828b29c2ea4bc5264ba1034ff6ed907436767b6b6534ed896a124f25de371aa8ecaebd
-
SSDEEP
1536:KYjzKmuGRy6oR52PraLkY5kIBA/0vY0engK:KY3Nl/I5WmBBtFM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2568 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2568 AcroRd32.exe 2568 AcroRd32.exe 2568 AcroRd32.exe 2568 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2568
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5df5715d0e1221b9f90cdb0b01dea6e05
SHA115d39fe9544968eceb50a006f90fd5a8cde8750f
SHA2568dab8bbaa02270cda0c86c5504c25f706915ee66d97275a6baa9049f68941c8a
SHA5128981017ff61971f87d1d72bdee5dca71a551a59b38132ef619161dfcc5d263eb507b447f7fb8f6c14a543017f5e418860d4ee85deb1abbf5a4ad9dd8fe84e23f