Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/03/2024, 17:15
Behavioral task
behavioral1
Sample
05daabac821b6fc56c159dd625c3474049a9f121fb45f3372bbe0117f85b54d3.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05daabac821b6fc56c159dd625c3474049a9f121fb45f3372bbe0117f85b54d3.pdf
Resource
win10v2004-20240226-en
General
-
Target
05daabac821b6fc56c159dd625c3474049a9f121fb45f3372bbe0117f85b54d3.pdf
-
Size
116KB
-
MD5
4db930961578164d4792cd5c37e9c04e
-
SHA1
c40292f61b9baa792280b50d9e59d2b650798955
-
SHA256
05daabac821b6fc56c159dd625c3474049a9f121fb45f3372bbe0117f85b54d3
-
SHA512
0751b9b4a2fd4eee60a81ea20513af451cdf6b4b2b39ccb9fa4ef23b2a8cb58328fb0ef7f09d219eeb0e64317977ccdc9b5b41bb1a9ea2056e5aa14cf6e0f4ab
-
SSDEEP
3072:0OLOcS5zDy7gLxgfShJYxo5N3phWlzn3Eegutz3u8qXF5Ry:0jzDyELxWSAxoihn3IYFQF5U
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1208 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1208 AcroRd32.exe 1208 AcroRd32.exe 1208 AcroRd32.exe 1208 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05daabac821b6fc56c159dd625c3474049a9f121fb45f3372bbe0117f85b54d3.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55922fbe3c53004dd6d3c66920196365f
SHA15487d66e48392422468b64d1e1966315d0f4772d
SHA2565970c4933d57e88667ed79930955989e6c04d573b4678877a7e19a65fd49658f
SHA512b4ef0bfaff6cf2e84410fc209b554886f926f42225fd77db842e2fff30339d436b824c28da49d6065cbbbab538dc1e0a5eef759b5ca453aec0234f709b56cee8