Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 14:24
Behavioral task
behavioral1
Sample
d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf
Resource
win10v2004-20240226-en
General
-
Target
d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf
-
Size
398KB
-
MD5
43f4c17f0851fc882b6d9fb588d141f2
-
SHA1
1daeb5f0383ce4c9cce280bf607a17abeaf1ddec
-
SHA256
d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f
-
SHA512
63c9a9288b87a7444751074383799e7b45ba08492b0654eb32dbb08a3c7ca66f260b6e51e559cb09a53480f8e8d3aa236312cc2f17e938d25567bda5ff15a002
-
SSDEEP
6144:4opV4Esoz7o9DkR2rIRSg+QGiXNeWlcrALaifkSLnSpv2VNff/NwOfYFI:XVCoX8ERx+KXNzBLTTbM8H/NjwFI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1084 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1084 AcroRd32.exe 1084 AcroRd32.exe 1084 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1084
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a39eacc60c8bcbca21bb07292486df72
SHA116e076252a7d5b2739988e7b4674a09c97da6abf
SHA25671354b4f1fbf3a115a0052bb1f49ed002d0f6da27ca5d53803d44fda9a216d50
SHA512239d881c309f48e9a7f108568deabb9d03d56946f76f661dc0d9694460c586022b26c7be986ba22fc34ae728fb3855900e1a9ce7a40c5cd363c7e6b7ed1fd8cb