Overview
overview
6Static
static
6Additional...on.pdf
windows7-x64
1Additional...on.pdf
windows10-2004-x64
1IMM0008_Sc...2).pdf
windows7-x64
1IMM0008_Sc...2).pdf
windows10-2004-x64
1IMM5562 SU...ON.pdf
windows7-x64
1IMM5562 SU...ON.pdf
windows10-2004-x64
1IMM5669 - ...on.pdf
windows7-x64
1IMM5669 - ...on.pdf
windows10-2004-x64
1IMM5955 Me...re.pdf
windows7-x64
1IMM5955 Me...re.pdf
windows10-2004-x64
1Use of Rep...G).pdf
windows7-x64
1Use of Rep...G).pdf
windows10-2004-x64
1Analysis
- max time kernel
119s - max time network
123s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system - submitted
11/01/2024, 03:51
Behavioral task
behavioral1
Sample
Additional Family Information.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Additional Family Information.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
IMM0008_Schedule 3 Economic Classes - Fedral Skilled Workers (2).pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
IMM0008_Schedule 3 Economic Classes - Fedral Skilled Workers (2).pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
IMM5562 SUPPLEMENTARY INFORMATION.pdf
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
IMM5562 SUPPLEMENTARY INFORMATION.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
IMM5669 - Schedule A Background Declaration.pdf
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
IMM5669 - Schedule A Background Declaration.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
IMM5955 Medical Condition Questionnaire.pdf
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
IMM5955 Medical Condition Questionnaire.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Use of Representative Form _canada_IMM5476E (G).pdf
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Use of Representative Form _canada_IMM5476E (G).pdf
Resource
win10v2004-20231215-en
General
- Target IMM5562 SUPPLEMENTARY INFORMATION.pdf
- Size 129KB
- Sample240111-eep9hseafn
- SHA256 594f8a836bed47e3f8b5b8d7b63631b051c615cf61e666c2ee576b955bcb59f1
- MD5 b511742bd1df76fc77c9d9ac9be93899
- SHA1 38cf2619ee4dbd331336a6a912f2fec85d3cc386
- SHA512 d3e8d83ec86d07ee04bddac01a2e29eddd471a2a7bd9ee32e082a807f340b6e66636577b9555b1c26b1e9f9012d0e222ed75123012bfdeb169b74decd34bd9c6
- SSDEEP 1536:qLL2qDiuf/UTgUTkPHmLjjKITVNuUTxyzWA1z+PsLkNyvF6B+ndysXYsebLVNquF:YV/UTgUT2UTO2sLdndiLDqudL
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2976 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2976 AcroRd32.exe 2976 AcroRd32.exe 2976 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 f6ec58900aeefca29d207b1bf80147f7fe555fc730c6c442cfd449ed8a460c49
- MD5 48d1d13c1cb8cf2c3c108c4a7caa051c
- SHA1 43b933024e10f0e1473c5eef495841de6d4ab331
- SHA512 96e097439f2380697aff2c35c2e731ae3194c5a6bc35000f6c7900c9d38b9142a6c99f71754a86483dfce45d174b5f8eab7c4d2c6e29ab390a6e8cbf7a2aa676
- MD5 SHA1 SHA512