Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
27/03/2024, 09:36
Behavioral task
behavioral1
Sample
e15a71889a85f46f0b5ba3fd575a03e1.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e15a71889a85f46f0b5ba3fd575a03e1.pdf
Resource
win10v2004-20240226-en
6 signatures
150 seconds
General
- Target e15a71889a85f46f0b5ba3fd575a03e1.pdf
- Size 73KB
- Sample240327-lldydshd39
- SHA256 9aa23073131fc5df761a56237820a91b75a22feb67c6034e24db3e2fa7909687
- MD5 e15a71889a85f46f0b5ba3fd575a03e1
- SHA1 9e7f2966efb85337ea2fbed9316f8d1536ac037a
- SHA512 a30035bec72a9c3f2e04638acc3f11c4a1f6a676396623443857ddba1c1bb9838058e26fc7b73d039612b3a937b216551be2202c37db17199a19261fdd5b5bd1
- SSDEEP 1536:4uZ9HRGfmiXvU2kUFbGJgbj5CFtYLDJEDzRgsme16RCGW0sgebDln8uGj:4k9HwhU2kUdG/FtsDPsMEGWwefmB
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 e69ccc06b43008103bb87ac4e175025bc780b9725e4362535db51256af6017f5
- MD5 2fb63c681ca02e237687bc8d2b2a1a82
- SHA1 217f0344bf8f6df19891eec06b024e0f60bebee9
- SHA512 c0f5dc90fc0c55614f92ba7028f9aea953cdb697386ca3eda89c536671f83f04d66317b1ccf225f4843792803cb3c2e42cd0fe35673ecda9ffe32174ae336e1e
- MD5 SHA1 SHA512