Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07-03-2024 13:30
Behavioral task
behavioral1
Sample
ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf
Resource
win10v2004-20240226-en
General
-
Target
ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf
-
Size
579KB
-
MD5
7d233f61c554ca0566ee08ae763a8def
-
SHA1
54a06a3c3e791e91392e76c87d0b977800b33083
-
SHA256
ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93
-
SHA512
5c68430ef4b611e5eacc809d1c0025acb2c14562a3eb73b4f180b984166ce1d8f40cd78d15ae219c1db9f81f2ff21155d5ab047278f4fd49f3911ee45f7ce9b1
-
SSDEEP
12288:9SIA7dwgmwZQTASWCcCAQ6mkzSMmLGaNF:9SIAZwg2TvdBAQ6/Sgaj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dbcc78a87d8e068294772771c656acbd
SHA1723a3f6ddac0577a5823af5a2a8c7e1d05811244
SHA256c1de612bcea83fcf21d4e839149df9a49dd0b91aa0a8564d24d01bae32bdce47
SHA512edf18ad9589d3770b3083328c1b2d280d3f16677a49b7e9ab26da526df092d8acd1700e12a996e793a840b3a24b659de0ea25e32127aafdfccd2527161c1402a