Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 03:52
Static task
static1
Behavioral task
behavioral1
Sample
e1741c03b42c730592e0a29861eeb6e08139f43b2bc84693c61bfa697d1537ef.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1741c03b42c730592e0a29861eeb6e08139f43b2bc84693c61bfa697d1537ef.pdf
Resource
win10v2004-20240226-en
General
-
Target
e1741c03b42c730592e0a29861eeb6e08139f43b2bc84693c61bfa697d1537ef.pdf
-
Size
44KB
-
MD5
164c010122bd83f22ebd1a5ccf2fd27f
-
SHA1
bfdf351b8c72ad281d641158b16d543b380dee5c
-
SHA256
e1741c03b42c730592e0a29861eeb6e08139f43b2bc84693c61bfa697d1537ef
-
SHA512
7aa15fef31a4b5cedf94e2c84e5c7e6c79b2e6bb455fe57fb548878261def3e0a79255f097f8d471505bccadafc0aafa6d2322e6f5f9bc928e23d5060f38a466
-
SSDEEP
768:yopMEOtUD9tpHFsneC0kjRVS+jELVChccc7ulUITD+hJEmbyw5vMXAK1SBp5Y:/OcD9tpOh0v+j6ohccXTTD+hjbB5yH1t
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2804 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2804 AcroRd32.exe 2804 AcroRd32.exe 2804 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1741c03b42c730592e0a29861eeb6e08139f43b2bc84693c61bfa697d1537ef.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d10f90438308f364d0001d877ad0affd
SHA191a72d0b556683ee19f2ed0ade8f86eb86d7502d
SHA25677efe09c12f3b6f91b30e49ab0f1333b1ec99e254544eddbeb469e1feecb3508
SHA512c17c5214b1b9713010edc1743f73ea7b527c5c7663f2cb01af7ab4abcdfb446da121aa51fe4c73028e7e68a9bf071d2d88c2fb7caa91ba36e7dcf5d8548c2b07