Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 20:42
Behavioral task
behavioral1
Sample
ai-future-of-teaching-and-learning-report.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ai-future-of-teaching-and-learning-report.pdf
Resource
win10v2004-20240412-en
General
-
Target
ai-future-of-teaching-and-learning-report.pdf
-
Size
2.0MB
-
MD5
59f904a61e2bb2ffc4145251148b2ec1
-
SHA1
bd02dc3a43cfdb0f70a17db5d78924142f6bf0ca
-
SHA256
639121ea9d94a40e6037e68ac1ea5a81ed0682165b6f55432fd241290ecec4c4
-
SHA512
6ba9db55f70beed273b23a9af2c161d7f30a10b134994d1a4686bc52f7245edfd5e556b43a07c27d55f5c881c791cdb59c58803b2cb1e744cd2d0c4cf280f14a
-
SSDEEP
49152:mgpTchT21HQwdGvEaJF7+G8FHIo/GPX9SPk7gSB4:mgdcR2xPGvRYVp/wa5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2320 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2320 AcroRd32.exe 2320 AcroRd32.exe 2320 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ai-future-of-teaching-and-learning-report.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2320
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD511ccb5f1b270d15e4137a465c3c0e274
SHA1c324d7e15e14ecfee48522925029a4d630337e72
SHA256b0b982a27206fdefa4a2e5c725bb6abf4aeb37db1129e386311bd41d8fda291c
SHA512d6416b5ed754231e05704782260622bfc2cc24adf594e2c85492d1a05213c089f7d30336c23d6e5c46d6089f69ca2b5c0214211d9a9a385161f5f8c5faff4d10