Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 21:31
Behavioral task
behavioral1
Sample
PO601509_Req._COR_AnyoneHome_2024-Anyone_Home_Inc.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PO601509_Req._COR_AnyoneHome_2024-Anyone_Home_Inc.pdf
Resource
win10v2004-20231215-en
General
-
Target
PO601509_Req._COR_AnyoneHome_2024-Anyone_Home_Inc.pdf
-
Size
133KB
-
MD5
83dc666e9c50f2ad561b61d9fafcde9e
-
SHA1
fcc677438bbcbdad369cfc1b5fe888e09cbfe01d
-
SHA256
fa53838e8bb5ab60ab1c486f01628bb1bca9ef7d63b9d83fc8b1c42837921c73
-
SHA512
589a4c14bd5b6c075c4791e5860a5413a0909115e4efd9bfa7397e68a159393baeac376b106d915a1a19a206e14feb80cf409b74c22a5122cdff6a3e10f2023b
-
SSDEEP
3072:KZsw5zi/Y5BNtfzBzq/XivyEmEXZhe8DI9Ao:KZNFxbEXyyIXi8K
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3016 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3016 AcroRd32.exe 3016 AcroRd32.exe 3016 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PO601509_Req._COR_AnyoneHome_2024-Anyone_Home_Inc.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3016
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD565f323d1767dfa1fef12c47a8a266a5e
SHA1dfd39635d0dc61b750f4aef26ce856f766a2fc93
SHA256e1097141eb8b3129f2c8893c2cc059dd89497e69c9015797f3294e8eefb29efb
SHA51281ab6195824b4b2c57f8a702a63de052ddf623d5e3b5f7aaff69257526b1f95fff758e1002de89b0a116a33dc5481160eb54e39da4817c13ba039a57e4953588