Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24/02/2024, 23:07
Static task
static1
Behavioral task
behavioral1
Sample
67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf
Resource
win10v2004-20240221-en
General
-
Target
67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf
-
Size
13.5MB
-
MD5
eca76b23635bd47c3693df187a4b1218
-
SHA1
c15b2e72911609c16aa18c52cc73db3d7b7ddd97
-
SHA256
67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5
-
SHA512
f33db349b185ff7f59a0ad1a5c0d8cf1e6b2c1fdeb0f3cf13be8c2a47f9210d72570e636aa7d4cbc9308f4daafa16076f168b504b49ff15c7fd7a8468bcf5c70
-
SSDEEP
393216:b2aYLocrS8eZO5hihEaiSZLQG3EPgXAThZm3:b2FocrSc5tgfEPLTm3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d6652dd97fefd94c98b0387fb20e0a6b
SHA1dcdfa301f0feed245f34402c3ad01c5d4653ea56
SHA256d7e1fdf1a2227c52e8e4e7cc0f38b0d161fec3c68db8277e3b1818fdc6f2f91b
SHA512683c3fc9f55e6e8d1167e81fa20b8525e491736de3d75d9f3f2846dbeeeca4c51a433e8cf5fe40dad8f1a37003b1eac8c2e66de5f7ac35fbee999c2616e104cd