Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
15-11-2023 18:15
General
-
Target
Payload/ESign.app/Assets.pdf
-
Size
1.5MB
-
MD5
8f63256f6deb6681dc55c9adf92669e6
-
SHA1
c86a3c611f182bf21ba9622df3fddcf74b384694
-
SHA256
8b8ee995e41859ef45cfe5ae1d5147e7d127fdc89b74d98822f767f7b63e0365
-
SHA512
0b19107961103faed1f836ffa6f844227ed3f98d8c09b454fbbca5ddf6d531febe1b2645acc4ba9d0fbb101b6d949c55fb995f53b11cb14a2e654f7e6007f90a
-
SSDEEP
12288:VIdD6RdK+bPdzRibfZUeEsoUsTgBbVJzyoygT6SfzXCp+c0SvggkWxXkvZkoXT/8:Vqg154TpXgvJkWtsT/1xU/qZx
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Payload\ESign.app\Assets.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD58cc1247b27c90bb7cd9c336a83218cbe
SHA1eb49fdf67a52a36e95185bfdaa77c251c9eb339f
SHA256e7fba9ffac869f13f0325429dcd72a2aac4dca5b197c7c9ab5a39a3621114177
SHA512cfe29352ec76692993d88b889f06f4869c6118523d2f12e9e9798edad5ce89606d5ee5e304e284940d2bddbea9d9e5cae2fbdf4a74b84b67ce41a9308a8faa3a