Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-04-2024 06:09
Behavioral task
behavioral1
Sample
f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf
Resource
win10v2004-20240226-en
General
-
Target
f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf
-
Size
365KB
-
MD5
52943dc2fdb1e377c3669bb7d71cd48c
-
SHA1
f32b8e3e0f05d2f2fa33aa44fa87a9d9f52662c2
-
SHA256
f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76
-
SHA512
b51901c6343c4e39752b0424760e8cfb7c137ed246479ea2063a0e8ad9cf132729b279482e41f402780d4b661cf864a2b67d6024fdffa9e70e4c7f66a5d31eeb
-
SSDEEP
6144:XXaCXbIEcS8PXP5RqRfLeDkFZ9F9w/gy6TJ+w3BfFl7ED6tPIX9BISyARUkv:na8ItX0fLeDM9Uz6TJ+wG6MXy0v
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2452 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2452 AcroRd32.exe 2452 AcroRd32.exe 2452 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2452
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ee454c11dffe79640c2fe7305f0f09f8
SHA150bbd3a518feb952f7c2606b4dd99d4bf4666ce2
SHA256288a794cb6115bd8ea813e7c38a249634f85863356400a0507fc51762d3fa01d
SHA5128027ac145d9dffb17ff8bbed7ff5a12232e22e66dae1dc25ed53653776f188f22f01555208e86319234172b65b2372d84c559e9f5cbbe673aefa447bb40c7cd5