Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
02/10/2023, 16:38
Behavioral task
behavioral1
Sample
tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf
Resource
win10v2004-20230915-en
General
-
Target
tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf
-
Size
37KB
-
MD5
b864b6731eb03c3bc2f5834a21290c04
-
SHA1
4dd8413117425563af444f904388d3e83b2ba66b
-
SHA256
f69b7f3f275b1c1c3056d53017b84a7c3d0ee1e3986667ca1cf11390927a4e9e
-
SHA512
09b8db6299c3faf520a5017a0caafc416f386ab2c8d475256265b6a98c5d9033b33f085c5d7223886e618e8bc1cdc66fbc4a7a716cf7778d4aa18942a83c549b
-
SSDEEP
768:QH0qm69HsVmoLWbOzpBGAITSiWMsB7ik+cjaJa7NgngbEeAkk582H+dV2:QH0qmKHwmoLZBGAySWC7ik0a6gbED8ZM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1712 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1712 AcroRd32.exe 1712 AcroRd32.exe 1712 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5062449cd9c8ac384a17b581fe7117d50
SHA13367fa6417abf8f86fe80784a0025595654ddd31
SHA2568c6896ae67f2e06844597cdcd54d6020246c5b1c6b3604cdee1728b3227abaa6
SHA512d9f529b2080675b879ba564f7bb67f679a166ed84272c26dc6f4a50cad3ea7a0d2b8b2ddb9d290af2d287fcebe38694c1b8f4769d5a09062dffde48046430874