Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07-03-2024 13:28
Behavioral task
behavioral1
Sample
7fa4eeaf44ccbfddc3f54812e7e6285b9259980d71ce2aa1ff076177e8d5bfac.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7fa4eeaf44ccbfddc3f54812e7e6285b9259980d71ce2aa1ff076177e8d5bfac.pdf
Resource
win10v2004-20240226-en
General
-
Target
7fa4eeaf44ccbfddc3f54812e7e6285b9259980d71ce2aa1ff076177e8d5bfac.pdf
-
Size
160KB
-
MD5
1a8a8864f11a7a19257fcfb8832cd1aa
-
SHA1
619f0d5563d9e964c4d392e313ad9e5d2567cb8d
-
SHA256
7fa4eeaf44ccbfddc3f54812e7e6285b9259980d71ce2aa1ff076177e8d5bfac
-
SHA512
44286f1edf594068468ba8ae845927a538285770338728f2bb1da349a8cdcb7ecffcd8976bd6b3884a7d19f25a92e93c8f10e3695bea4aa613eb311ac75b3a4c
-
SSDEEP
3072:liCJWGQtqcC7je8fya9t3X1rfp49Jm6Cf4dg+QQwSXq5EqOMQnxMp:lBQtI7x6aXF6fI/aMkxMp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7fa4eeaf44ccbfddc3f54812e7e6285b9259980d71ce2aa1ff076177e8d5bfac.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f119676ede74a600786775e0ea5e59e8
SHA1800e64deca316b3119240be1e12560d3dcff4835
SHA2569999bb26a284a00b1a1be267c59a2fa7af0d89250b45f3e01827feb2a8328f6f
SHA512031279f816b2a1eb286c2e9e86a1a35286dd321e10cdebdb365040c4f66f91592a43459bb97639ba983ea0646b30bd0f082b8ad76e86884f76a749eec4417aee