Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
11-03-2024 09:44
Static task
static1
Behavioral task
behavioral1
Sample
4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf
Resource
win10v2004-20231215-en
General
-
Target
4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf
-
Size
1.4MB
-
MD5
b9d9b2c89b11ccbcf0e336a20702b373
-
SHA1
c2fda53b76c3c5032bd644bbb6332be960e9fbcc
-
SHA256
4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1
-
SHA512
86be30ea1ea3e533ff27401b9cb5f7d75061ca42808034270fc6014b2208b26699263d8e764f32df34e093c7042c16c098c0abbf7cdab7178e666d4ad8eef9b7
-
SSDEEP
24576:NSF53gx3jMgznN7WA8KaRPbYRoYEc2Ds/TQ//8rMvBENkjjjjjjjj9GOFobb:N+53QdhUAEFDZC1Om3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51ad23bf847da30a52035d67f4bfc88fe
SHA1a1a29c0f6e008b6172b97ff8d0d9316cf8ab42ae
SHA256b2024cc10432a2056d6d4d0fab0ed75b6e844ffaca45c20459525ec4ed0e44cc
SHA512e4d65f54df2d793587536264975f99ea3b7e80923699581d36b530f69b2410cde061094d215d5c2952729a822f50ecde799b041c3e54c4a1714ead3aa67a47b5