Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
24/11/2023, 20:50
Behavioral task
behavioral1
Sample
D680013121001202200043000A secretaría2023111765740.pdf
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
D680013121001202200043000A secretaría2023111765740.pdf
Resource
win10v2004-20231023-en
General
-
Target
D680013121001202200043000A secretaría2023111765740.pdf
-
Size
330KB
-
MD5
cf68f3ef32d8b1bf7113e4101260121a
-
SHA1
5e65a5fdddb06c822ffa25020ef397470eab9d37
-
SHA256
722f2d047019a71186d0044ce80f6f1f2ad93a79da33ae885a5a7e8b16a69fc4
-
SHA512
3629dd2e482fa23bea3a70f613ca65452f03bd873bbaf783dc19398b6b86f429920f21c50e4512a516817a4498bbf554cb1089941df4b0724cdf88eaba25c3ef
-
SSDEEP
6144:ZBbl6CL8isf6yBrb8WL+PJrCSfcHS6DGH5V2hkbBlH6jIPfpbTFHlmK:ZVCiByFLkrfu3DYVQKBtZ5lz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\D680013121001202200043000A secretaría2023111765740.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52f8281c7d5986022eac5b712f6970f96
SHA19e7c65648b6a3cf2cc15c32877ba47365a80c1d8
SHA25677b715d93f7c21365d52e625fbe51b23a0a0341f85c918d909ba81062ffe3c6b
SHA512269064e0ab4e9ae2fcb40dda5aec14deafc517dd78b24155be66c94c5dc3b832e54f3ec60103f54be0de4d15e57ece828a42af796af73b55996870aac86a4a4f