Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 08:15
Behavioral task
behavioral1
Sample
2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf
Resource
win10v2004-20240226-en
General
-
Target
2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf
-
Size
410KB
-
MD5
d364a66595f201e92824459036b9ae10
-
SHA1
85065f090b1c16d65f2edf027c129823743195b0
-
SHA256
2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83
-
SHA512
23b05a6b289e47243c595aa31951c37e47818560091cef8d1bc8ba9246908d420e2adbdfe6c0926996b001ed3a7d1eeaec6840592230684e7d95879a38bbf5ac
-
SSDEEP
12288:bDRU2DUFiTPS52Fas+mOVBOe/q0aSsbqtQmwp:X/UQHso0aSsqtop
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2184 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2184 AcroRd32.exe 2184 AcroRd32.exe 2184 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a58c446f0599a6692bc96855a2aaaa46
SHA178961036540aa1283e6c5b74cf739b1ce722b91c
SHA256a653a58a986b2ca6a24fd9594a4f8c2258f298d1d9be3db8da9e6c709632064e
SHA512c179a2862005e39d0b3f3bb2f0214e13da03068b881cfd1b9f414b4a6b9911eb3506146cb320838b0da94957efee7711c37a26419a7ee14a17d8a86db9704ddb