Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 08:15
Behavioral task
behavioral1
Sample
86c2d641e7217fa7909c139382ea872d4b855833f36d8ef61c88039fa2e334ca.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
86c2d641e7217fa7909c139382ea872d4b855833f36d8ef61c88039fa2e334ca.pdf
Resource
win10v2004-20240226-en
General
-
Target
86c2d641e7217fa7909c139382ea872d4b855833f36d8ef61c88039fa2e334ca.pdf
-
Size
19KB
-
MD5
b49f87e04473613011bfb2994fb679d2
-
SHA1
40201b33bf827e9265b3a4918b970eaab64132f3
-
SHA256
86c2d641e7217fa7909c139382ea872d4b855833f36d8ef61c88039fa2e334ca
-
SHA512
2148835f9fdea8f44a67703761a6b5049d94bbf6447dfb11b53a3db765476633638157783f28b1a8b706194ab5c7b6d94919e8306fe093892fe319a361caae9c
-
SSDEEP
384:slcxg7bPhCCNtmiXCUSZNRoudt909cCUSBB9GzPjS8zf2uz+CUSm:ub7bwCN8iXo7ouL9FOHGzbS83iB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86c2d641e7217fa7909c139382ea872d4b855833f36d8ef61c88039fa2e334ca.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD556db71549058fa9b9024dc6a20d45e9e
SHA11ac1e44de1537f752bbe53e9c48a771cec066197
SHA256ccda8f5d05f199fcd16ef5619cd838c8b20d9284ea110631fb498d5e324860f0
SHA512592feec9b13e4add337b7e0f518e60087e40439f923e012047fb5a3d2785005f3f702d8a7c8ab9f5379069461cd89bdffaf1a0960dc523329efcadd132c3a2be