Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/03/2024, 13:00
Behavioral task
behavioral1
Sample
edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf
Resource
win10v2004-20240226-en
General
-
Target
edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf
-
Size
10.0MB
-
MD5
df54747d8645317f7c2dbd265e6d4610
-
SHA1
331a4593543b5e6a67f9470fe55c88f7addaf142
-
SHA256
edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b
-
SHA512
273c671e3bce75da7430059589dace4c5f80e0a5fb058ea07ee955fafd9ff6ac633d39c3985036cebbd4ccc3dec4511b94ac0a94343bd166de169b6549ad1e75
-
SSDEEP
196608:B+jXt6m9Rn7uyCqmatuzHRoLzSs03R0aKryTN4N6+FJaup5eZ/mIBpIRt:Qt6mjnyXqezxcFOhTK3FJaupQwtX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2324 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2324 AcroRd32.exe 2324 AcroRd32.exe 2324 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2324
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c9982053c6f9a50b5d4223a9d7c07b8d
SHA1a64e1b1f4aa5fb30b149b5d6d32b260498b3bcd9
SHA25612230aab3563a0a24a322b363c9597b8684a51379cf1f6b927735a08b7954ede
SHA512f70f9142e5e7dfa0ecfa79c4f7791a2f234ec95a6007644ab5f9b39fd5b1cee8842f3e3105d01013589ca160cb6e2f6218c7bb36edfa13686c58684d921c4e8b