Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-03-2024 08:24
Behavioral task
behavioral1
Sample
4447c8ea6642b37538822292dc46192a7039dc54ab0d889172ab25dd15353f11.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4447c8ea6642b37538822292dc46192a7039dc54ab0d889172ab25dd15353f11.pdf
Resource
win10v2004-20240226-en
General
-
Target
4447c8ea6642b37538822292dc46192a7039dc54ab0d889172ab25dd15353f11.pdf
-
Size
2.9MB
-
MD5
d4f5b98d072f061e4ae41a8fb7c9bf6d
-
SHA1
4443abaf018dffb34746b649e3b289c97082e778
-
SHA256
4447c8ea6642b37538822292dc46192a7039dc54ab0d889172ab25dd15353f11
-
SHA512
05df53c39122be884130d725f1fee26fc54a5ad3c7b33026a93ff298148eb509460cca32776aa4704f8c8e970970e9f633077f2a3ee1c4c6918282c0aa9b91f1
-
SSDEEP
49152:I66fsKpKV8fJTaNeX+2faOrNETjuEH51dYEX+WYvdfzgb1gdu0fl5X/oMlf:IT8ifJTB+8rN4juEH51dvOWGt5du0fQI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1524 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1524 AcroRd32.exe 1524 AcroRd32.exe 1524 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4447c8ea6642b37538822292dc46192a7039dc54ab0d889172ab25dd15353f11.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f884c1bcec4f7571886a74e7647efb64
SHA121eb559bdac76a226e3925f953a238f5b85b3dd6
SHA256385c0fe1e0425bb0e77ee2f46cdf865a4f5423de1c97d9c52828e8b552adce53
SHA512f72e5378a6c04bb795f9be69788b94d0bbdc6bd1d6305ed1815fa8a7ad571f23b71c45de5e6ae927e413b1b6867a49cb37b5dc145ff7ca8e471282ab4f19be23