Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 08:20
Static task
static1
Behavioral task
behavioral1
Sample
986ebba8916b9c727e263f8f62cb6c6f7650468bb6d0170772217268750c6180.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
986ebba8916b9c727e263f8f62cb6c6f7650468bb6d0170772217268750c6180.pdf
Resource
win10v2004-20240226-en
General
-
Target
986ebba8916b9c727e263f8f62cb6c6f7650468bb6d0170772217268750c6180.pdf
-
Size
30KB
-
MD5
ce1dd2cae3554289036195e649a1ba27
-
SHA1
aa66a2c51455c4505a68c4c08a086bffc824770a
-
SHA256
986ebba8916b9c727e263f8f62cb6c6f7650468bb6d0170772217268750c6180
-
SHA512
ca403844396288bc745f6f6f8b2679268771152cf0e4e4ad0d169f7a85557fd09b877e423eed6907ab6856afaed69fb2a2168fa29b278ef58595f94505a9b9d1
-
SSDEEP
384:w6+J9eEgMYjB9VTrd0CVdcIWN7GWFQEPsfC5sSLEQaMwSfCUSa5TSzaEaSRVztb+:fF3XB9VTxla9ncC53IQNRfpSzl5BsB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3036 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3036 AcroRd32.exe 3036 AcroRd32.exe 3036 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\986ebba8916b9c727e263f8f62cb6c6f7650468bb6d0170772217268750c6180.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3036
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD558ea5fe11470da9ad0ad1eaf182a6a59
SHA10e81ddd6efb2794e1c425d91b7adb6d61de1c726
SHA2567a039a6ac14eebcd04cd79ef6871098bd1223408010bd42c21aa5d83eb61e0fc
SHA51233205b682b339bff1f5aa4fd0402d4d2c6284f235e7c892a1996d49b3942ef133db232bb170b65c3ca2a2d41b4eedf414dc48612700d7e6c3d9da2c1aa1133ad