Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/03/2024, 08:48
Static task
static1
Behavioral task
behavioral1
Sample
50690b850e4563aef9a62019be63bc4ddf79634332fc905a1df4e508fdbeb39b.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50690b850e4563aef9a62019be63bc4ddf79634332fc905a1df4e508fdbeb39b.pdf
Resource
win10v2004-20240226-en
General
-
Target
50690b850e4563aef9a62019be63bc4ddf79634332fc905a1df4e508fdbeb39b.pdf
-
Size
119KB
-
MD5
3c0a29985e59c22967d874cb2f0684e1
-
SHA1
d0d0f8e3f42f8e9083477b4d657cc25f28c02fa7
-
SHA256
50690b850e4563aef9a62019be63bc4ddf79634332fc905a1df4e508fdbeb39b
-
SHA512
7e17c6aeeefd1e1819944ca4f52294d4de7c9363292292da9241ea545185298f6f5f43c896212e7a5b7e6d13d3fefcf735ac80c03c0bde2d40ddc0d78f9fb8f1
-
SSDEEP
3072:lf6+M+aDcyXKU667U0ygkzui/y+JqH6eK:lf6+Mwd6RygkzdYHY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50690b850e4563aef9a62019be63bc4ddf79634332fc905a1df4e508fdbeb39b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58a093fa7640a938ac4b9eb98579f3278
SHA19b5de85b30bdd6425815115680055ca207f2aae5
SHA256d74420ab948c7e07ec86bce322cadabdbc7ea9d8cbd1be559f2f497b2b9811fd
SHA512b594aa6a870a6a5316d9a948189805b8a2774aa80b8d508234fa3792311d49407c1da9865fa7b4de1548770a1f4e39f42dd10b27c15b8d98257a68f66b972a5d