Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
10-04-2024 07:54
Static task
static1
Behavioral task
behavioral1
Sample
cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf
Resource
win10v2004-20240319-en
General
-
Target
cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf
-
Size
240KB
-
MD5
952cc4e278051e349e870aa80babc755
-
SHA1
b2dc60511ccf81873961bb912c23848ee96505a0
-
SHA256
cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99
-
SHA512
aeea2aafd2d51b6d61a388db38c0fb3aeea40a983ea441a3a543340d4f0044e3eedde825df689154af97c2e457ce32ffd55350614b4a2482d72e141580734beb
-
SSDEEP
6144:rfMAUwGgLUHxI3MCGF52JB5614WL2LcOHhGvvmagzs:rfMZ1CMD52fNEEBGvvog
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54127e1e75ddd782b7e092faef7d33d22
SHA1995e8a050a244664fff2071536ebbae546799279
SHA256049d16d3ae1b18cc61bae3212e5ddf37777c3c61a3d5f9289ebce8fd511e6e55
SHA5125772ad8d0538da5cf4e6d2453344be31e4acc85e9bb305ece9151311d87bef5bc556999d0bcaea37805fda77851d62310aa0e227e1700d641569a8c8317e68cd