Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/03/2024, 13:19
Behavioral task
behavioral1
Sample
e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf
Resource
win10v2004-20240226-en
General
-
Target
e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf
-
Size
3.5MB
-
MD5
e53a21887aefcb6716cd58f0ef191aa0
-
SHA1
34efa31964c24520835da3621a95beca13a14cca
-
SHA256
e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf
-
SHA512
bb8a4cc005dd5b77fba0533904089385d07e1899c0aa68a6d1a0c4da1ebaa651642aa562413c663c882399a5a2e0161993ed83bba66ed0bfacf18c9d97a80283
-
SSDEEP
98304:dYgzDtJEb1/8oEkjAENPK2tFLDZah2uHDA8j4yd+MFLnXf:WKDnkXRvZmHDAdy0MFLnXf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2764 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2764 AcroRd32.exe 2764 AcroRd32.exe 2764 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2764
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD553b0be28096605cdf84df61b513cec74
SHA150f19b1b93223ac325930e7f997e6a2938be2b8f
SHA25674e45710d6e82205b7c10cebb77e6f4852981c093bbf4c12f0763f3765d78da6
SHA512ce16d60ca8de7ee701226602cc646ec9cca7c70d8e77f83fa5e2aee02f0230d6b4bcda0a3644ae23187bba1f7d7893d9000dd43cb90de98930c9e6494ed1f1b4