Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/03/2024, 13:29
Static task
static1
Behavioral task
behavioral1
Sample
93a68be1be024491d98cc2460f43a05a4751b1b10101a7ebca9b9aeec4668d13.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
93a68be1be024491d98cc2460f43a05a4751b1b10101a7ebca9b9aeec4668d13.pdf
Resource
win10v2004-20240226-en
General
-
Target
93a68be1be024491d98cc2460f43a05a4751b1b10101a7ebca9b9aeec4668d13.pdf
-
Size
1.3MB
-
MD5
354269e8b1592a25ca8edb767b5bd574
-
SHA1
71098551dd33ea7e21cd2d52f8f0d909581d595d
-
SHA256
93a68be1be024491d98cc2460f43a05a4751b1b10101a7ebca9b9aeec4668d13
-
SHA512
a1ecc28372b3b9953d75280142a6661a208334fcd7cef87f98ec1bfc0d2389d7747d255171b579f39d0f8324239ae80e5488d7dd10c958febf9cff64ef82ccc3
-
SSDEEP
24576:odArDU5B4OP+rnc5C6wh1XNX2PjVzn58MkOsJTIb90+ck+y3N5KH6NoIs:nfKBJWrj60NNXYjVbOMkPR+r13N5qXX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\93a68be1be024491d98cc2460f43a05a4751b1b10101a7ebca9b9aeec4668d13.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a9394eedcba9788f26cc9b42343cca3d
SHA1e2e22aa8915d042e2a49e4640c230572003db075
SHA256629e6cf4203da4fcc6de8bea449e702ef4df979bd0f776cc2e5b411fb55e9359
SHA51273c2391b3fb208ddbe43e7e816cf828d7b150c43e7a2f76c03af11423b20d284e1f3fc328389128de940d39114465cf3a5d9218643e69aaed78b6bc8f83c2772