Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-03-2024 08:14
Behavioral task
behavioral1
Sample
3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf
Resource
win10v2004-20231215-en
General
-
Target
3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf
-
Size
2.8MB
-
MD5
cd89df88fbfbc912801c7337f5fae655
-
SHA1
2f0c901142e6088855700dd2da7c204255778631
-
SHA256
3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2
-
SHA512
391ae4881e70c92635bc9d1d42bd3f60101933c2bf97aea017a2ae908653da8925c54dc386edcf45a0645aba51523ea6ce482a9e631cc17bb4d0217b47184eb9
-
SSDEEP
49152:VoPQe9tUCxGwrSjRb1jiwsr7US+N9SWINdf9XmES1XmSVQ:qYe9l/mRJ2lrAS+N9Szf92B1XpVQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2892 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2892 AcroRd32.exe 2892 AcroRd32.exe 2892 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2892
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56a3e9f1cb7a45649bfcffc960b6c5d11
SHA137f7a4a2b45a7ec6f6f6b108989aeab4b04407e2
SHA25641ae3eedc7f25115170bbc1c3f37c64ef85031865a5a492113fd9ae0f5d78031
SHA5124b7203db7bd266d4c18254fa6d86fc8dfd669b20417c018f7296b6510cf323b90579917123ec7227102070f0ab641c44ea0512bf8b98014dfd676beb1524ba44