Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 23:58
Behavioral task
behavioral1
Sample
78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf
Resource
win10v2004-20240412-en
General
-
Target
78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf
-
Size
1.6MB
-
MD5
3a8ac6bc2298ef953673c675c733e4bc
-
SHA1
e6e76ffcfb0cbe7b2a6f9c4c4f04cf764b218147
-
SHA256
78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc
-
SHA512
a22c4e7407cf29278ada08040ec10a7845de576d874b376ef4c30b7947114fda27d18184bb0306d7cdcfe06101284e01168b83be0daa6c3e033206b6fb035378
-
SSDEEP
49152:GCgI6H8DY1rFsambFPf8gWdqT189DI30z++e:GuQx1RFmoqWC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2644 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2644 AcroRd32.exe 2644 AcroRd32.exe 2644 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2644
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58ec3363181351724f8846149db498e0d
SHA1d3a97062c3f99fdc40053d4b267fdbb8880a3e36
SHA256bfb9eb3a4ea412d747ceae8764d662a55a7ec7b7b47dc708c130805a3776698b
SHA51241bc57752f890b9fcae12e2556d475568d97da0145be5326bb9726f21220a9aa4938fe6a6381e1f38e9a16daf943a7836f80cca180edfc07b553e431cd56b219