Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/03/2024, 22:34
Behavioral task
behavioral1
Sample
984835b0bc6e809444bae936608e669975953d01e23a295febb71e10a098bac9.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
984835b0bc6e809444bae936608e669975953d01e23a295febb71e10a098bac9.pdf
Resource
win10v2004-20240226-en
General
-
Target
984835b0bc6e809444bae936608e669975953d01e23a295febb71e10a098bac9.pdf
-
Size
117KB
-
MD5
ee27183ff4ae5a0b2a420c8497811190
-
SHA1
36a9999187de7fe0b137561de4d8a160dcce6eef
-
SHA256
984835b0bc6e809444bae936608e669975953d01e23a295febb71e10a098bac9
-
SHA512
41223ba2a98b4df65841f5320ea3a2afa64f6aa3e4c16c54bb9061d616780ac638202ea1b9446e1dfcdea72b70896fb3ee770a167fa9698d26863eaf198b2e1e
-
SSDEEP
1536:hu27i5pJT7SCgsq0/deeahjm0/jnaemCBmjz7hMJ/gXjZmnfhCsjQYdo7fVGM7YI:8Wi56CLq0rahjnvBmH7mmjZmfVQ+oJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1868 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1868 AcroRd32.exe 1868 AcroRd32.exe 1868 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\984835b0bc6e809444bae936608e669975953d01e23a295febb71e10a098bac9.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1868
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55922629f3b4e88d5e100e89c44a1ccd4
SHA1ebd31d732f6aab54bb9f10e4a16553b47ac39125
SHA2569a017ae19304f79f936b7b4e5d8bfab9efd508bbb45b8af45dda179295bb4aaf
SHA51244de66d5ee182102ba360e7161e84f14f57c1330d155b1231969b2901c6adcfba891b6ebda226e3e7c61c82acd7b6942deb2a233926e99b9f1f1e7be0c62beed