Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/03/2024, 10:00
Behavioral task
behavioral1
Sample
c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf
Resource
win10v2004-20240226-en
General
-
Target
c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf
-
Size
299KB
-
MD5
fbde088b8816f24a9354c37b2f3ef815
-
SHA1
25e9b1532cd62fe1b6fd46fc22d8cdeb9d6b03c8
-
SHA256
c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f
-
SHA512
605845f8c80ec4de5a1de5d618d8aacba2a741802d77975f0e8a860a8874c25c9af4ff80a985b8679829354f07b2c06616c4df7c76d0277f9092001d274482d2
-
SSDEEP
6144:FYl2TnZnNhoubnpLEbQGy7Fi/31J8Njpc2eoCyrZa43XZAhy/3aP1:FYEnZnNhoubNcQG51EbeoCsA4HZYKqd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1756 AcroRd32.exe 1756 AcroRd32.exe 1756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cfe0f6b92ae42853bfda2fc62eb3f06b
SHA1092a2ee1d821a9e7cf5cd8059343042ad3217863
SHA25615fbeb9bd78f5e59213c34b0c907ccbf7502b1bc831a4940195db0de03bfcf4c
SHA51267a6d939cb2000d16889b5c5d03595335c1b1cf5e711f96390ecb2522ef8c6c363e0f6b42f949c646e2936a8da716d07ab486f53511467912f56b13203e00244