Analysis
-
max time kernel
151s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12-10-2023 10:42
Behavioral task
behavioral1
Sample
6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf
Resource
win10v2004-20230915-en
General
-
Target
6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf
-
Size
224KB
-
MD5
e05d70a96aeefe3d4bd804dd8f654fc3
-
SHA1
0f4588070f1214a95e7688f06729f48588da1d30
-
SHA256
6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d
-
SHA512
5b2109db4e3b37ad52a3134c91a8ae380e18dab172b2bfe9e4e253c59ca0ad00290d8822904a55a8fa71999169dc8032d97588fed56f3fe7863de903f4baff3d
-
SSDEEP
3072:dr30jIkU95DCemoQSX/IGMZU6+TstoIoSzTEKbJl4zRSMQIs60d:xKUTJdJAZZrtoHSYSMQF60d
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1852 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1852 AcroRd32.exe 1852 AcroRd32.exe 1852 AcroRd32.exe 1852 AcroRd32.exe 1852 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1852
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD573a5f304e39e253b512e5bfd28215ade
SHA189b6c14f5037ca90abf98ec512611d8845a49145
SHA2560324e907afa74e21b6296e3f27b023f05140f19bfe41677bf392854ba45411e3
SHA512c6c3b7405c10192628f277a7b88a2971e7161fe23c326e157e2d82bdcd02cf3e4b0acd4c28d24893eb4a4dfe69e0792b966778db7ef2d9d2f36678c7be098954