Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
08/01/2024, 03:48
Behavioral task
behavioral1
Sample
4a5c2873b219d92512621507772e1c0e.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a5c2873b219d92512621507772e1c0e.pdf
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
- Target 4a5c2873b219d92512621507772e1c0e.pdf
- Size 86KB
- Sample240108-eczeeabfb2
- SHA256 587fa915d047e07fb8e21cce4fd327029ebdca523374fdce85120d5d82bc63cc
- MD5 4a5c2873b219d92512621507772e1c0e
- SHA1 6f14b33f3f941986bc5148b1a9192490ec2a9a94
- SHA512 0693dc6c47c837c9c52504918f7375be9950300e1be1fe1aca361c8dd6411ebb6c20aa321f0425e300829cddcca0a15384e11881ddc900edfabbcf7dbbcc2498
- SSDEEP 1536:iZHu+PZ4pvz3Mf5kWuJ+Mofki7KIhcgnvqr3TadcNbWLJI8aWOpOaZEWmRC+q7UN:qbx4pvDMaWuVofkhIhcMqOdcNy9pPaZq
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 9592743d212030f011baf2df2e736b0171cccb9a4d8b5d2f70ba56091f87f461
- MD5 6ef83e32b6aae510468f3119c2051cca
- SHA1 c3d7362b5590715fff69695246c56a6c2dc4d5f9
- SHA512 0434ce1f9f1f3994e5e535b2255a8d3c6713c477a1032580a8628529cfc1529d0079d713ec53b18ba90f5d903341a9845134219132bf204e70bb6d302aa4afb8
- MD5 SHA1 SHA512