Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 12:03
Behavioral task
behavioral1
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
CERTIFICADO NR-17.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CERTIFICADO NR-17.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win10v2004-20240412-en
General
-
Target
CERTIFICADO NR-17.pdf
-
Size
845KB
-
MD5
be63cca52bbd675f446d775249d62b1d
-
SHA1
0dd60a0814ffbbd98ab36907a209e539ac61c32b
-
SHA256
1c9f0ef20946241dc8c9f39781200fa5c9b3be89de4e367e60b51948ec207cdb
-
SHA512
55154a7662a9d6e5029f74addf62869c296ad989bf51c5ba93a456478b93e85299996388ee1d26191e3d8cf07eeed10f2cf5160d71f075bd39d78a4e3ff4a48f
-
SSDEEP
12288:kkZiYIe9joH2cWHp5khR8WiOjkk84sW1TBrxQDC0kIYEgWnK2OsHP3:kkbIisHeHrCU81imq1rHP3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1196 AcroRd32.exe 1196 AcroRd32.exe 1196 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56277c958ec28ba05117df788397ce9ed
SHA18f77d5aa88ab29edde9b207d3f2c513445fde024
SHA256f8701a811174285b8c22e2f608f7b83187c0665dc170652395227b40d4bf7bb1
SHA51210e97a370bd55306994698c3809d6ef8f75ead779fccf8384185d330d9b08e3e68c655fcaa254f8626baa87b02149b4d45d54fcafb65caefd722969c844ced26