Overview
overview
7Static
static
3(03) PDF R....2.exe
windows7-x64
7(03) PDF R....2.exe
windows10-2004-x64
7PDFR_Print...00.exe
windows7-x64
1PDFR_Print...00.exe
windows10-2004-x64
1PDF_reDirect.exe
windows7-x64
1PDF_reDirect.exe
windows10-2004-x64
1Stamps/APPROVED.pdf
windows7-x64
1Stamps/APPROVED.pdf
windows10-2004-x64
1Stamps/COMPLETED.pdf
windows7-x64
1Stamps/COMPLETED.pdf
windows10-2004-x64
1Stamps/CON...AL.pdf
windows7-x64
1Stamps/CON...AL.pdf
windows10-2004-x64
1Stamps/DRAFT BLUE.pdf
windows7-x64
1Stamps/DRAFT BLUE.pdf
windows10-2004-x64
1Stamps/DRAFT_ULH.pdf
windows7-x64
1Stamps/DRAFT_ULH.pdf
windows10-2004-x64
1Stamps/E-Mail.pdf
windows7-x64
1Stamps/E-Mail.pdf
windows10-2004-x64
1Stamps/EXP...rd.pdf
windows7-x64
1Stamps/EXP...rd.pdf
windows10-2004-x64
1Stamps/FINAL.pdf
windows7-x64
1Stamps/FINAL.pdf
windows10-2004-x64
1Stamps/FOR...NT.pdf
windows7-x64
1Stamps/FOR...NT.pdf
windows10-2004-x64
1Stamps/FOR...SE.pdf
windows7-x64
1Stamps/FOR...SE.pdf
windows10-2004-x64
1Stamps/INF...LY.pdf
windows7-x64
1Stamps/INF...LY.pdf
windows10-2004-x64
1Stamps/NOT...ED.pdf
windows7-x64
1Stamps/NOT...ED.pdf
windows10-2004-x64
1Stamps/NOT...SE.pdf
windows7-x64
1Stamps/NOT...SE.pdf
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
14-03-2024 03:42
Static task
static1
Behavioral task
behavioral1
Sample
(03) PDF ReDirect v2.5.2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
(03) PDF ReDirect v2.5.2.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
PDFR_Printer_Cmds_v25000.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
PDFR_Printer_Cmds_v25000.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
PDF_reDirect.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
PDF_reDirect.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Stamps/APPROVED.pdf
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Stamps/APPROVED.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Stamps/COMPLETED.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Stamps/COMPLETED.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Stamps/CONFIDENTIAL.pdf
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Stamps/CONFIDENTIAL.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Stamps/DRAFT BLUE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Stamps/DRAFT BLUE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Stamps/DRAFT_ULH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Stamps/DRAFT_ULH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Stamps/E-Mail.pdf
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Stamps/E-Mail.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Stamps/EXP Business Card.pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Stamps/EXP Business Card.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Stamps/FINAL.pdf
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
Stamps/FINAL.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Stamps/FOR COMMENT.pdf
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Stamps/FOR COMMENT.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Stamps/FOR PUBLIC RELEASE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Stamps/FOR PUBLIC RELEASE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Stamps/INFORMATION_ONLY.pdf
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
Stamps/INFORMATION_ONLY.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Stamps/NOT APPROVED.pdf
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
Stamps/NOT APPROVED.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Stamps/NOT FOR PUBLIC RELEASE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Stamps/NOT FOR PUBLIC RELEASE.pdf
Resource
win10v2004-20240226-en
General
-
Target
Stamps/INFORMATION_ONLY.pdf
-
Size
5KB
-
MD5
d45908dcf6aa4194fa08583c173579d8
-
SHA1
43b2397be6dae66c4b89aaae0d23b2ce77450490
-
SHA256
f5e99b2122fb80ee498ce4b370846a61f191536058a3e24a81c20907dc9c6132
-
SHA512
7ef0ed8e639dcb378b05fa10c12aaee146aa22fe8926d6313489e245114302680d16550d905da6f37bcb1185cd4fece70b2117c199876932a20e71bf46303fd1
-
SSDEEP
96:l8U3NmbDRskRxTmBJyQcYNYaoD/c77I9/KW/84py/bfYoQrHI4Z36suxseN+emfB:73NknR0EQcIoxL8wy/bg44ByZoeU1uM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1728 AcroRd32.exe 1728 AcroRd32.exe 1728 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56fdf4f566ba49c41e91a54d5665dc265
SHA104dab6aa61a29a1afd9e367e1e52e4d017071b10
SHA256c15f614dffa55386ec22475993c00d018d8756dcc3a372f76287af70dc44c92a
SHA5129a526d8e7f83a363d7ab1bbadd506b27735b601e4b43365ef8e93915410766df3c25f342a3eb1f24aeecca6e04f12e6fdecfe092209926f03499a8ef1fa8e9fd