Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 12:03
Behavioral task
behavioral1
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
CERTIFICADO NR-17.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CERTIFICADO NR-17.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win10v2004-20240412-en
General
-
Target
CERTIFICADO NR-17 (reciclagem).pdf
-
Size
846KB
-
MD5
c787f99d7427e6c10a0e977eeccd1fd1
-
SHA1
e500db3a9cdaf124850f8632891c307aba937421
-
SHA256
342daab4b12703af8ffa692e2ae6259ffefb1e3bdeb17cebbddf3560db9320ae
-
SHA512
aa63ac8ef545c3684dc1c7e1552ccc8071ea389885e0ee5b9871bae9cae4ac2556c4afff86e62c9b2296ccb341dde0e22bdae7bdca15c564416142f390b00cdb
-
SSDEEP
12288:xkZiYIe9joH2cWHp5khR8WiOjkk84sW1TBrxPjVDCogWnK7YRRRhe:xkbIisHeHrCU81fVDJa4e
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2860 AcroRd32.exe 2860 AcroRd32.exe 2860 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52be48e7a6f513f37462fa84cfe6fbf18
SHA1cc015de252ee366a554958fdcae3b6b07295a36c
SHA256ea53f5d0670a5273d9c95ad3c5bd8f7caeae3021687b6b5610f5737330ae84cc
SHA51201f18e73bd59ed5c9007de5f030f144942c8bf856447119cc8b653c9b6ead6e347f776e6c570180e642ac1a918c7c1e5f072fb521a98fe3cac060953a8456f5e