Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 12:21
Static task
static1
Behavioral task
behavioral1
Sample
5d1bb2889d06c8d718eb36daa208b53cadc40282bf236d0f546ed4e709a25034.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d1bb2889d06c8d718eb36daa208b53cadc40282bf236d0f546ed4e709a25034.pdf
Resource
win10v2004-20240412-en
General
-
Target
5d1bb2889d06c8d718eb36daa208b53cadc40282bf236d0f546ed4e709a25034.pdf
-
Size
329B
-
MD5
32537dead8cb5c253f2de71a906ce295
-
SHA1
f1ab4142b2be6dc4090ad59eb8cb8346723fa014
-
SHA256
5d1bb2889d06c8d718eb36daa208b53cadc40282bf236d0f546ed4e709a25034
-
SHA512
f6916865cc444ce083eceecb9a5c877b5c25ec75fe936a33dc123a7e96173be864d6077cdbc033e4bb7a71570bc44f2c76e5c1ca53f74427936e1857c76f5888
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5d1bb2889d06c8d718eb36daa208b53cadc40282bf236d0f546ed4e709a25034.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c7a2fd968dcd8953c904a3aa04f138d2
SHA14fc9f8abe32aa928c95db0509ae2fe074a697fc9
SHA256e528ab5ee544ad5bec8e6ed927b116b7d4d75db639318e16e1c93beff9d5445e
SHA512a302517edd12e2b0b04e26df400f6eb5f1b8e46777233737a377f678514383ccb43c88c4c863fea3a3923f005d61cde103a8be449dad177dc52d67d293dd6606