Overview
overview
5Static
static
5EOT PAILIT...RO.pdf
windows7-x64
1EOT PAILIT...RO.pdf
windows10-2004-x64
1EOT PAILIT...TA.pdf
windows7-x64
1EOT PAILIT...TA.pdf
windows10-2004-x64
1EOT PAILIT...2).xls
windows7-x64
1EOT PAILIT...2).xls
windows10-2004-x64
1EOT PAILIT...OS.pdf
windows7-x64
1EOT PAILIT...OS.pdf
windows10-2004-x64
1EOT PAILIT...NA.pdf
windows7-x64
1EOT PAILIT...NA.pdf
windows10-2004-x64
1EOT PAILIT...el.pdf
windows7-x64
1EOT PAILIT...el.pdf
windows10-2004-x64
1EOT PAILIT...RA.pdf
windows7-x64
1EOT PAILIT...RA.pdf
windows10-2004-x64
1EOT PAILIT...2).doc
windows7-x64
1EOT PAILIT...2).doc
windows10-2004-x64
1EOT PAILIT...03.xls
windows7-x64
1EOT PAILIT...03.xls
windows10-2004-x64
1Analysis
-
max time kernel
293s -
max time network
316s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
13/10/2023, 23:59
Behavioral task
behavioral1
Sample
EOT PAILITAS/EL BURRO.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
EOT PAILITAS/EL BURRO.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
EOT PAILITAS/FLORESTA.pdf
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
EOT PAILITAS/FLORESTA.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
EOT PAILITAS/Generales/EOT pailtas proyecto de Acuerdo abril OK (2).xls
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
EOT PAILITAS/Generales/EOT pailtas proyecto de Acuerdo abril OK (2).xls
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
EOT PAILITAS/LOS LLANOS.pdf
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
EOT PAILITAS/LOS LLANOS.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
EOT PAILITAS/PALESTINA.pdf
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
EOT PAILITAS/PALESTINA.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
EOT PAILITAS/Plano 19 - Division Politica-Model.pdf
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
EOT PAILITAS/Plano 19 - Division Politica-Model.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
EOT PAILITAS/RIVERA.pdf
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
EOT PAILITAS/RIVERA.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
EOT PAILITAS/~$T pailtas proyecto de Acuerdo abril OK (2).doc
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
EOT PAILITAS/~$T pailtas proyecto de Acuerdo abril OK (2).doc
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
EOT PAILITAS/~WRL0003.xls
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
EOT PAILITAS/~WRL0003.xls
Resource
win10v2004-20230915-en
General
-
Target
EOT PAILITAS/Plano 19 - Division Politica-Model.pdf
-
Size
277KB
-
MD5
57bef5bf9244510ba20c5c4ac16fbc15
-
SHA1
2e723ffd72f3c0f23441af098fb0892a5a2a9a4e
-
SHA256
14ebb70e120f508d90fc21b400af00d87bd337288345ba49c2b4b9b945515e94
-
SHA512
cec30020e46561fd4ce5d82dd744bef936a50bfe4d4d910288a7a31085f8013454703b1526d020f5f36056bdf75b07d1a218d1a47147d74390d32ac74da6c5e2
-
SSDEEP
6144:7DnVSSZrxCIadVZEfMEnA26Y+3SCYENj9YJ20XyebbkvNKXjpn:77PIIaizA8CYENj9YJ28PYcx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2716 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2716 AcroRd32.exe 2716 AcroRd32.exe 2716 AcroRd32.exe 2716 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EOT PAILITAS\Plano 19 - Division Politica-Model.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2716
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD533044fe57f466d1c3c2c1f6026aaff71
SHA1f66b7a1fab581630f1ed93ef45d103a042f914cb
SHA256398cd2aae57b16d28d7477a84f2746ddfe8bd2ee16974d25e931067185d65dea
SHA512cc6771e29399bed9b65675dcc7a2a629c9c6dd64a11aa86d3cdffc409605c8274e7b82b147e572a043e07e5995d061a08696e833e3eda2eb8006030050c6fd99