Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 03:41
Behavioral task
behavioral1
Sample
dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf
Resource
win10v2004-20240412-en
General
-
Target
dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf
-
Size
236KB
-
MD5
0bab3f270a095dfba3ea1a31e00d5327
-
SHA1
5bfc721643b98d15e2bb96ecb55d9e47b3debd1e
-
SHA256
dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c
-
SHA512
676e9369fe4682d0c7a84e64e2ea72f7600fbba3cf37687164cc6e5b721015ab7c0e4f99002b7b964d20750371027243f9c708a531ed32ea1c2391c0bdaaa9ab
-
SSDEEP
6144:55j2M2Yeonhyh3Fz5qje9P6TM2s9k1yZCcCJsH:vC3onhyh3Fz5qQCTyW1yZTH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2820 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2820 AcroRd32.exe 2820 AcroRd32.exe 2820 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2820
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53ba8028bfbaf29f7da713a643480d631
SHA1134c25e15c16859d3baccb65aaafb15c38dccf16
SHA2562e11fd38df3edfa2ad3778d039003c08816c33d1c68e8d00109d76a7c0de782f
SHA5128e07156d4f3dc825c75b8ce59be71857457181d1973793a21683587698d2029df0304b57aeed513fe2deaa1aa4eca5c6222d541d94a157ad50ff88278ae43f9d