Analysis
-
max time kernel
151s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
16/08/2023, 18:52
Behavioral task
behavioral1
Sample
42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf
Resource
win10v2004-20230703-en
General
-
Target
42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf
-
Size
157KB
-
MD5
0ca1cf2f219f75984fb71b8b4f62e5a5
-
SHA1
9656ca9788471c4bb7ba52ceb63d2de06d2c93e7
-
SHA256
42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc
-
SHA512
383f6704d11fd0336d3e022da965838966ef2e05398ee91abb62f7cd0c7d29086c13c749a71fd3f3c53514942227ff7b52a305cea0345204c7346f2f7441b754
-
SSDEEP
3072:OlAlDE31pFPiaSFqp/L4vrEGcFqydIxVMciEb5aA/y816Gf9amkWFWIXcq:vQwqp/svrEG1xVzZ5v/yE6y+w9X/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2432 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2432 AcroRd32.exe 2432 AcroRd32.exe 2432 AcroRd32.exe 2432 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2432
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ccd119c1c064c55992bd26b3c538a2c6
SHA14a0c9b3e39f271a9c50e868c92ef87751efe24e8
SHA25630952c9b11ce6f83cf050179bd04371d7d24ce31b96bce701308cee6fd76676e
SHA512c94a57878841a0de7fddf5a3757f6ea53318da339cd8781a007f2a542c692fdb953db40f078437659c24eee52a6e028cbd7c1838ea1c8b9869d53bf8ec8b7a95