Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 18:24
Behavioral task
behavioral1
Sample
03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36.pdf
Resource
win10v2004-20240412-en
General
-
Target
03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36.pdf
-
Size
1.1MB
-
MD5
3c490a207888046cbccc91f7c8e59242
-
SHA1
73fc31a1bea18995f4da509e202431e43a297b50
-
SHA256
03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36
-
SHA512
7aa32a588e1c5869faa32d6adfb413d2a788a9d769facca6ef11c89fd868b2ec5a825a248a763aa6558e2a04ee70253965a92e34ab77c5f029eb8c4d888c1242
-
SSDEEP
24576:Cyf2mzsTsehX23cmCG+JTpDhy9yH6ODkTPOypv7:C2sTse43cmwVpzPOT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03698c09feff6edd19aff56d5e815b1acff4c5ea610cab2af776ab50faae9f36.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4f29078f14af0d0263affdb0438a7d3
SHA1976a4b4fe6384418ef5892e6e40f32042c1aa6cc
SHA2567c4ab047990130a2875bc13e6e9408dfeeedd399e1361abb5dfdbdbb83e03c81
SHA512c35955468413c5a5eafa045160e26d85f2ad91066fdc0894ee57ead7d8b7f9eda354cb458e992143a078d2f7924ffafdec1b34d9179abd233c414896d77df99b