Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-04-2024 01:25
Behavioral task
behavioral1
Sample
91f40aa4fd77ad46dbc6db7e6511ed38242a02a79a1eb1d381e210896a8f3c87.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91f40aa4fd77ad46dbc6db7e6511ed38242a02a79a1eb1d381e210896a8f3c87.pdf
Resource
win10v2004-20240412-en
General
-
Target
91f40aa4fd77ad46dbc6db7e6511ed38242a02a79a1eb1d381e210896a8f3c87.pdf
-
Size
83KB
-
MD5
2c9543d92c997b13dbf845f3a26364a9
-
SHA1
e99bb478d2efb6aeb27fb68e981bcb2a5c589a8a
-
SHA256
91f40aa4fd77ad46dbc6db7e6511ed38242a02a79a1eb1d381e210896a8f3c87
-
SHA512
043e900ed63867c155a2b29258ea712b56d7d2e6b939848d69b2ee71bfa17b671682ee980a351f3cc962315012e04e20ecc9a1078df3a1c7bbcc38a44beba904
-
SSDEEP
1536:Z5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBACj6vSnTftSQ5vJDgMO2ITQg:reOcJGORh8SrTyQFiACyytS6DROzQg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91f40aa4fd77ad46dbc6db7e6511ed38242a02a79a1eb1d381e210896a8f3c87.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5864894e49c4eb474e7616dbad916273d
SHA1acf84bde832fd37e9b75a2dafb19e2cb6e6fa049
SHA2565a940480f2a478763829bf17fc07b6ccd2971874305c6f648d1484727b2815c0
SHA5120569903d4755f2f404b149c4dfade0fa0f4c197591f9b3dcf4efdf5ae82fed46883f110cc893adb6b51822462a4986ea9484c1e97b418e22c16df5b92ed2e9cb