Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-04-2024 00:18
Static task
static1
Behavioral task
behavioral1
Sample
7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf
Resource
win10v2004-20240412-en
General
-
Target
7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf
-
Size
250KB
-
MD5
cb23eb0cbbe6fa3efbc0f03da2371c0b
-
SHA1
58f3b54d3bfa3fe32ac761767004a1bc24fd5953
-
SHA256
7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623
-
SHA512
a5f5a9358585cd48a0ddb39d80d9dddfc2999ed4360640711ad27d8052dbd85f2736b9f1c6f574ecfb4d3330dd308d4766513b126b6222b249e155d453087f59
-
SSDEEP
6144:YseXuARaUnp86+uPNDPpMEPEoJUgHuPgorpntCG/LlmugzUC:YBuAcUnp8kNrqwEoJUAuPgordxLlmugv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1860 AcroRd32.exe 1860 AcroRd32.exe 1860 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1860
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59dcbed0dc5e5510d70a9231ec25dfa83
SHA1a06c24038779af32b2261cbfcefb2e558a7a26a1
SHA256e1243bbc524c81ffac63e44f044ce95615f89b4070998ba7f70ec8b01de2c4d4
SHA512c35526c61da9c4f4082f53473a84104c51c21d743a2c405608a29b4de81b0b95a0ddc1dc4b5ab8a8682a6dbde50b1182a0e1c6bb3935d20344a9588789b3cdb2