Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 19:45
Static task
static1
Behavioral task
behavioral1
Sample
1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf
Resource
win10v2004-20240226-en
General
-
Target
1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf
-
Size
301KB
-
MD5
c36d509ea343dbbebe4111a379a9e5c9
-
SHA1
8a0b62c222e61df89af3544d7bf9f99ce797f01b
-
SHA256
1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b
-
SHA512
733ec89bd937b782575b1be8224041c58571cb65eefa618a1d3f5fa0257acec9a268316994dd393c6d11bf9ffd2a3de549cadbe60084b25b6173a3c222c7da1d
-
SSDEEP
6144:0vJRc680IFOVIlujRePZtvSGL/WnXr6jEzSNA3NBIjK3Rm/NCXxvdvs+:0vJmh0eI6uNextvb/EXr07AHAqRW0Vh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1096 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1096 AcroRd32.exe 1096 AcroRd32.exe 1096 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1096
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59e0f7550605ee52f06d171f133aebebd
SHA14f63eadc5966accc037f583e7b372312d4fe856f
SHA25693b6866ae692db4999778d85bf1ad8d9e0d62079a103c2bcdd03ac568d0e2825
SHA512288fc6ad7c77a7a7936751c12b9740e4cbd6fe98cd616412a5abb76527c3163de0243ceb18941d5ff99cdf437a27ad51a16e4d2839aa31640051cbe957040382