Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
10-03-2024 08:16
Behavioral task
behavioral1
Sample
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
Resource
win10v2004-20240226-en
General
-
Target
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf
-
Size
19.4MB
-
MD5
3f02cb36ab4cb47272dba97daa52726c
-
SHA1
f6e8f6566346a655ad6d22ab96e96d3cff82479d
-
SHA256
98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b
-
SHA512
1eace22dc02f4fa9a0100f29a28897170df99aa288ce710dce3cbea853484f24b229b0f8c8e88480cf35a0b1b04c823f444c6112bf4154071934b122b2f98a9a
-
SSDEEP
393216:eZuG9mIRh3YzNoXIHL5g7IBZW+ARHHIw3kEu06k9h9llhYucKMBftUfUC:ewGEihIzmoLFzWcw3kx06OfhC2fUC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1844 AcroRd32.exe 1844 AcroRd32.exe 1844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98cac92d8a65fd047ab450baa5613eeeba0ebdd44e3d18fa3c4f829d523db55b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ff2d5a157c8d2135e3e3f601ddf119b4
SHA160e1a5acca92c8304b20b1dac290ee83c044535b
SHA2563e52436e7f78559731008885a4ec325c0c535cce0852609939e0ec6ea816946c
SHA51253a0144ba3da562e03b96292d1c62b45fbd492f1ce08ea474d3bdc6c1df88d8d62ddc79e44152f1c896541fa720ef7f4e2570b64ba0e491eeb1517d1a6ede45f