Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24/02/2024, 22:43
Static task
static1
Behavioral task
behavioral1
Sample
6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf
Resource
win10v2004-20240221-en
General
-
Target
6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf
-
Size
1.0MB
-
MD5
18dbfdf7dc042ec4cb50ac8ac3412ed4
-
SHA1
4edf98b644888fa2abac74cbb3b103cccd7bf3ec
-
SHA256
6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538
-
SHA512
acf1e1449062832f97199047140d2165231050bf68551487be778488f2a299878ee751b20a3aec114f012c46658618050827aa504df45602744f9a8c010954c5
-
SSDEEP
24576:yunefNkPMqeqN1lKS46pDwE2h5JX7m81xoiE:yuneVkiqN1ll46pRyrs/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2864 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2864 AcroRd32.exe 2864 AcroRd32.exe 2864 AcroRd32.exe 2864 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2864
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55e1e529bf6b04c0a1a10ed9598e4af4f
SHA15ad114ab31295c45a0b164ec6f2c7646ca77f55b
SHA2560c550bf4718a06d9b90998e0e16b73985248a3dfff1533d2c7c05edc6ca394b1
SHA512a69870b6615a52b83e315171df5b218c7d4d6d97a42c5ff8ed0e614f62c0737a2feb137bb4269ab8e78f431be0c5c748825f1ee8169a00c24c41eb096742e0ab