Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-02-2024 22:48
Behavioral task
behavioral1
Sample
db5f9f4376e8a349a44bc6f37abda8ce7c02a953433362f4a3ce53f18634afe6.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db5f9f4376e8a349a44bc6f37abda8ce7c02a953433362f4a3ce53f18634afe6.pdf
Resource
win10v2004-20240221-en
General
-
Target
db5f9f4376e8a349a44bc6f37abda8ce7c02a953433362f4a3ce53f18634afe6.pdf
-
Size
234KB
-
MD5
de77795ea60d897d49c6446915f0a863
-
SHA1
2554e2c0045d5e5e9e1298adc1593508fa7da2d9
-
SHA256
db5f9f4376e8a349a44bc6f37abda8ce7c02a953433362f4a3ce53f18634afe6
-
SHA512
616dafa796d94db9144b3f0801bc671800118fafba01e2746ad526e604a789b3414287a516416bd6529ea5492a4af7bdcaca1b57bdc57385138812c609eda675
-
SSDEEP
6144:Kv++6PN1q/jszNo2EHkG/iLdx3f7WSYGzuN:KvuN+IZOk3dxzPCN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\db5f9f4376e8a349a44bc6f37abda8ce7c02a953433362f4a3ce53f18634afe6.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5153cea5e9100dc89b7610f94c88f3d13
SHA114f709e220bf88806f2ab0b35df642bd0aaeb6ef
SHA256126e186342c45dc6616698e6e59ed5ad93a8b1e73fd4a6d16275ec13f0acc7ed
SHA51283cf97c6c3d5d921e19cfe0d49f5effd174cb5801df65e095e8581ff533c8532e97aac5b740b84301a186d2fd6675ea7e2986960268f60e36222bb0ac13d46c1