Analysis
-
max time kernel
214s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
22/10/2023, 04:46
Behavioral task
behavioral1
Sample
Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf
Resource
win10v2004-20230915-en
General
-
Target
Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf
-
Size
861KB
-
MD5
742627e3314e4b0653d55b7b3507036d
-
SHA1
8c5d96227b350fd8129309d8c5494711da5dec4a
-
SHA256
d3e0fd7c1ff117c56db3c22e388c55438cfabddff2ea5a55581246a89fdd4219
-
SHA512
d9e0d52797aa9050b19396c3f01fcf59668cc4abb34df936cbd1d34ee4b533d03371b176f6fc9df35370aaa718d908d780c46541b4695865d224e8e110dab717
-
SSDEEP
12288:E1OeOVzL3e9ETdGlcUoqmtbk4SRriwWdabFXgAcsOsvFXcduH7hrJjmfzvfGA3sv:7n3e9EpXUoqAIuwpuyX+KFrJ0f8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5889e055b0c056e57791a0b31c1aea217
SHA1bfc8e902611dfbeede69dfb368351bf7a82a94c6
SHA256a86e4282e47188133c799aaff1c816445f8bf6470f04690d30e4d43ead9ca340
SHA5129b58d06b6cd3bd5d8deac334e86e361a8e4bb683c469c43e9b005f0c85ea741c5d71bc747313e270ab5d2f6870af3c17ee97819916946f7b97ea5efe6067ad3a