Analysis
-
max time kernel
151s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
04/10/2023, 06:05
Static task
static1
Behavioral task
behavioral1
Sample
10700_SR_EN.pdf.vbs
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
10700_SR_EN.pdf.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
PR10559_SR_EN.pdf
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
PR10559_SR_EN.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
update.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
update.exe
Resource
win10v2004-20230915-en
General
-
Target
PR10559_SR_EN.pdf
-
Size
844KB
-
MD5
bdf588e5f7d5e15a95bff47718245b3c
-
SHA1
20e9205104ca6f7623d361c3ed5c50715bc3ea51
-
SHA256
126f0dc2ff08b82a42b20cf3640d4419bd5597ad52e32a5a311fa9894227c8dc
-
SHA512
ed934ed7bdbe1228451154e6c3169128cf5faf06e3e16183db13743cc83a21134f6f606165fc72461109d22b47bf405560744af8b2ff8299814a899aef698db2
-
SSDEEP
12288:5kU9Z+of2wFEdmS25PqxcN1864JmwPfL7daUJfBmIvuYQVVHRNInV:5kU9zFEsS21qxW6+Wj7AMfBJmYO1GV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2552 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2552 AcroRd32.exe 2552 AcroRd32.exe 2552 AcroRd32.exe 2552 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53911c0b901574e3bdc0c4f1e466089e6
SHA197f046cc3a33a27441532c1c6d3154cc9512e718
SHA256ce6aaaeafab794f0f4ee96f218e67d703c1f14872407dd37de4cd6d725095635
SHA5120414d06d375adb4ebe28c86c040ea78a8d8b35496cd255c03d56c1561424db63dbfd47783b66b6a7c59c5ffb52146867870b85c4417304ca32c1320c602a009c