Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 01:10
Behavioral task
behavioral1
Sample
f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf
Resource
win10v2004-20240226-en
General
-
Target
f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf
-
Size
331KB
-
MD5
2cc9f89200d88a7178ba0e700f97195f
-
SHA1
47c8f3988a1c69aebdf7da366f24a87c957bcccd
-
SHA256
f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214
-
SHA512
01b9719a8aa996e80ff006c43e3a540a6f8df02d92715be8234c6ab79a5d1bcaf29ce72874ea9dc8f252fabed62b211697a329adcb827c1ac414f9e216cc04be
-
SSDEEP
6144:OqPg1ay4J2tUwqg872fvZzBOLWfuVcsrvFl/G2lGHlk8J2Zck:OqoUyyH9g87QhzBOLWmVF+3BRk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2396 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2396 AcroRd32.exe 2396 AcroRd32.exe 2396 AcroRd32.exe 2396 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2396
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54a60ac82839c91a82aa46fb030e5ffad
SHA1cf5e0554ab7a34e5eee4bd60531b7beef51b22af
SHA25631d00f49a29bed571f73b12e5504f55ce32b3a89812d967250f7fde99667089a
SHA512d60a24dd8c372a2582a4e733abd7946b5a5414cf94f0186b675ac67af60a6cc72baf18a7230e02cb543b278712281bac7698ec2e5dbaa7bb402b3ee008792837