Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 21:15
Static task
static1
Behavioral task
behavioral1
Sample
68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf
Resource
win10v2004-20231215-en
General
-
Target
68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf
-
Size
83KB
-
MD5
57051402176ec890031b976948fca010
-
SHA1
cd163ddef90f789105ab4f2771f7e609d530cd09
-
SHA256
68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778
-
SHA512
8a4bf1f339811c12d67538febd627646ecfd3470dba9932fe81a40900b3e85c6d33a9ced6572ded72cb5d3aabbd8bf7dc28a9c63418424e330e46f67ae7c1b16
-
SSDEEP
1536:DUmYP7pi2Px9JLEnIwIASdqGDQqzTxgpIfKw48zYogyQEDDqiz1JvcFso:DwByKASdqGs2TxcKKhYgODlz1ZQso
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2352
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59c97c2189db434ec9340a960cb2f50b5
SHA142b83f126743f98f9c744444574ff5e924ed8464
SHA256f38cc982525910733d1d9b7ebecc0bd0964ac4aabd61c41cdd6a1e0f900f2afc
SHA5125b6fc18bf32d4e5b77b80f0bcd2815c19d127cbae286318f0120ea3f95908794bbe8a5be4f8449ebcec3b3a1a1e30a1d5d2ac8578df370f0b36232d36cb215ce