Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 05:35
Behavioral task
behavioral1
Sample
e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf
Resource
win10v2004-20240412-en
General
-
Target
e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf
-
Size
4.7MB
-
MD5
18e19e14dd24190bb5f6fbcc4e31510b
-
SHA1
1a1501a2ed52b71431fc5ad8d75a4f3a85873ad0
-
SHA256
e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980
-
SHA512
f09b63e4da9298cb7e633ecad58f3d2c0ee4f59e2b5eb7c4a25ff52fd8ad5285ab3ba21068b7bf29432f477b96e904bf284ec52c0ded55e5d33ee2ad7d64da60
-
SSDEEP
49152:KDZ1sB1SnYFXqWvvm25hNfcpfFtjdPzd1qZEAMy267ZSTX7qNdkD+y/lrx87cnx7:7BMAlv+sapfMWJcSr7G6lRnI9M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2136 AcroRd32.exe 2136 AcroRd32.exe 2136 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51bd620bd801188aaa75c9319470125ec
SHA1a7111f6d1df937a734b4af366ae670be44eb34d2
SHA2563737e4b65184c8c5c414814137f00df9a057fd331befe61834c7fc152d192668
SHA512a91da2ceb99df4e216592e7a8c30f71b8d8ead76277a5c2961b3ef953401fa569f7ccdea12a1726f7c06a3afa07d6c3cc81c5693b874e5f1f83ba14484a21b61