Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07-03-2024 11:07
Behavioral task
behavioral1
Sample
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
Resource
win10v2004-20240226-en
General
-
Target
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
-
Size
19.4MB
-
MD5
3f02cb36ab4cb47272dba97daa52726c
-
SHA1
f6e8f6566346a655ad6d22ab96e96d3cff82479d
-
SHA256
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b
-
SHA512
1eace22dc02f4fa9a0100f29a28897170df99aa288ce710dce3cbea853484f24b229b0f8c8e88480cf35a0b1b04c823f444c6112bf4154071934b122b2f98a9a
-
SSDEEP
393216:eZuG9mIRh3YzNoXIHL5g7IBZW+ARHHIw3kEu06k9h9llhYucKMBftUfUC:ewGEihIzmoLFzWcw3kx06OfhC2fUC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d9fca378efe04966134ae95fe51ac8f4
SHA177afcc353d9227ab6ba802c4911a94aab32d96c4
SHA2569edee0acc0c53e48175debe1f054f17719398b2f65a2ba8d52a0828533433691
SHA512b4ed4811549713b75d3d28cb3c89fd6ea4ca80a3ecf82c38664e04b6172ac2aabe2f7c8ebc1cf092a7c643453900655da6a61b7847a24759b71ad78ef472a7a2