Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
27/01/2024, 21:19
Behavioral task
behavioral1
Sample
4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf
Resource
win10v2004-20231215-en
General
-
Target
4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf
-
Size
469KB
-
MD5
4e99dfd9bfd4d26ef28a907a2aa9d778
-
SHA1
29e5959b094ac5e6bef108fb4ba1bf34aa9bde21
-
SHA256
4bc6adc48083e79b0e909a91444d8bd716b10c1aa561103a0442d1beed3c3fc4
-
SHA512
890da5166feac415a50794d4d21b6dd0fc54ab189e3e6c1052df4a1cd021afc744598b4adb56ee490b038c982a6422de2aa72dad7c22c9f31a9afb148dfd2973
-
SSDEEP
6144:qhicHRDTJ/N/bS5k1q6grr5eojTzgtPY8BI02PSss9jwhq+vdf33JpupYu7O4:qEcpt/pq6gZjwKtWb+Fug4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3024 AcroRd32.exe 3024 AcroRd32.exe 3024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aa1368e9ec47d8994a4ee0ea4f060fc6
SHA109eb72ea10416828b060ad3215399c11909f28c5
SHA25606191fd493e2b76cd5fc1f793abdc4be2d2e6b606a6aec6888dc9a79a7ace271
SHA5127bc4531adb016004a11f85b41824eb17912add3bf646c77b320ba496402f82ac6412b9b6597f89725d965e083e065adafd43f30c5b0a86d054427fb9b44c60f7