Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 06:20
Behavioral task
behavioral1
Sample
f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf
Resource
win10v2004-20240412-en
General
-
Target
f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf
-
Size
242KB
-
MD5
7a1ac0d316ff6f1d7296525b2c40a722
-
SHA1
7e6aae1111863d4fa478692b5f9dd7768ba0447b
-
SHA256
f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e
-
SHA512
3d7d7302e7218a09bb7e76931892b8d185a7e1ef6e2353e67dd9794f72304353f510a42ad6fe537a2da1fc98262aede08ab9d10781363088aef174705ef10822
-
SSDEEP
6144:frNoslQuFqBYLYihx9AOVcIiE/+Qox4DZe1nVXdTOt:zTlQucKNhzWDEGT4DZAVct
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5336ffdb9438fa5025513ec0fcd3d770c
SHA1c6f4ac07432067918ffc09896f409fa633ab323c
SHA256dfb3f776085b63c5a67966a4fb8fa1a1bbd5a4f09bb128e5307df27587121e5d
SHA5127ed419b64bf76353c7f8e6c8609a361fd67df8cdcd0c88c54beecd1360871b77c38994a37e0588c9f8459dbb56cd5ec897be306c43a802948c1a7e28dbc19ec9