Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16-04-2024 12:03
Behavioral task
behavioral1
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CERTIFICADO NR-17 (reciclagem).pdf
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
CERTIFICADO NR-17.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CERTIFICADO NR-17.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
EMISSO_DE_CERTIFICADO NR 06.pdf
Resource
win10v2004-20240412-en
General
-
Target
EMISSO_DE_CERTIFICADO NR 06.pdf
-
Size
819KB
-
MD5
29d81e23b0ea2509b6d54527ca3a3bf9
-
SHA1
a34f10118afc0b0bc5d192bfdaa8de7a3e89dabb
-
SHA256
f385d8ae75a6b08dba20f9425653e4129102933c68f5b556233f59cc4336b101
-
SHA512
72cc86a9cde8cfb62d5837d51925acba7303394de62aa7bd53da12f85cfbb54b5957e0a1d1e02d5a08e4b9dbc52aa654578b47b31ff8a58ed23cde10d97f0abf
-
SSDEEP
12288:bkZiYIe9joH2cWHp5khR8WiOjkk84sW1TBrxGDsdYRbrgOCdjqC7i:bkbIisHeHrCU810VEjfi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2820 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2820 AcroRd32.exe 2820 AcroRd32.exe 2820 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57aef4923c305f8a43da5ce9ce179843d
SHA1f139e78bb43c6b64e4a6ae31fdcb5853fd8f0b5b
SHA256d6685bb6bc4366cb191c3d0025d188899543f494518f7ec7e5051f21c51a908a
SHA5122c1ec909295f725663b5ed3e2f02b20fc21d5a268bc26bda9927a087bac6a7e62dcfc5127afcd134ad841869c862c1e9168f8814cbf98a4a2e04515ae568baf4