Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 22:21
Static task
static1
Behavioral task
behavioral1
Sample
7e91b67bda6a49335fd4ec60ff78e043871cd0b810e67e739ae0acd753d92109.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7e91b67bda6a49335fd4ec60ff78e043871cd0b810e67e739ae0acd753d92109.pdf
Resource
win10v2004-20240226-en
General
-
Target
7e91b67bda6a49335fd4ec60ff78e043871cd0b810e67e739ae0acd753d92109.pdf
-
Size
983KB
-
MD5
0333451e53b64222f6ce6d6f5c27a667
-
SHA1
c3ac10ff0c689f2bd9afbdf313c1579e7b40b802
-
SHA256
7e91b67bda6a49335fd4ec60ff78e043871cd0b810e67e739ae0acd753d92109
-
SHA512
3d235b8426fc9bbbca4afb3565094bf90eb06ffc61fd72475064eb116b19cd9197e6eebc8545312f571b48f77778d3cc058726d4f0bbccc66812c14c8b1c1b65
-
SSDEEP
24576:o6XuiIyhORj9w48JnLlW2U+8/qeT/TrieJEp3vCMQKlwbH18QB:oMupy8DBulBUJCebTzJa3vwH18QB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1744 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1744 AcroRd32.exe 1744 AcroRd32.exe 1744 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e91b67bda6a49335fd4ec60ff78e043871cd0b810e67e739ae0acd753d92109.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1744
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ea8402c1c8587f91c318270b3f629e2f
SHA15a9d87e1dee137df768188b7ed195672853c857c
SHA2569e1bbcb7ba88cb389eda09226d168e4645adc845c3656a8544d9033bcee7e8bf
SHA5126f22a25beeff6030f7da2a51ef2b673402c4f52520936701b7d3bb73722476234a8036896c69bb283130c5d5f41d4b2ade8286907f637f8c94d6e438429fe480