Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-04-2024 18:33
Static task
static1
Behavioral task
behavioral1
Sample
0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf
Resource
win10v2004-20240412-en
General
-
Target
0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf
-
Size
361KB
-
MD5
c829af0498a1c610464f25df6fcf1cc9
-
SHA1
8a3f58203812207e88b9e670a2c04d9f95f44769
-
SHA256
0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415
-
SHA512
b89d6eb3d5432d29dd2bbe2ab5355a9a586b5adf3534de407c289c0313c1b1656492f30bd3c8be80828b654c2a0897ea8d7e4af63b3862994dbc54d064f161ab
-
SSDEEP
6144:8tJotd2I0chhU3bV02nHp3XeTxNWCxxzv5fUeB4eL186gR9XfkfffmAMaa7M/:8Pot9kLRJ3wxNWCnzBfBfqTfkfffXG6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2852 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2852 AcroRd32.exe 2852 AcroRd32.exe 2852 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2852
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57bee6f3d56deca2e52692e9ac3649ff4
SHA1369dab1d268b1f1a8d66c3603d5f5d1e7ccdb7e0
SHA2568561bcacdf324e1bb6bd972da77d2ba9aa02119403149149d6cbb8e433a72bc5
SHA512730d6ce56581816cf29ef98b8422a41de53430eacf7764e4167d70137468f51f3614c17069c8477173b0b60ee5ab5d3a1fdb29a83859a238e373e7e9605161bf