Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 20:18
Static task
static1
Behavioral task
behavioral1
Sample
2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf
Resource
win10v2004-20240426-en
General
-
Target
2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf
-
Size
106KB
-
MD5
3c2d883ccdf801585d48ac05fe94046e
-
SHA1
30d023a3e6a513fc87e6b8480a2b713ae5e222c0
-
SHA256
2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c
-
SHA512
e348f8cf1d1442ba31456eabbe521b50240bfa44035669971294353682cdeaf232c4a0a1f1b5f406030482800c747b400b1bce160ac8e8f8c87806f14d7833a5
-
SSDEEP
3072:jr1k5KGQjAzJL0qSl3kpLHoMA+PPrV0zEc7:kKTjA9oqa0tIMJP8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2320 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2320 AcroRd32.exe 2320 AcroRd32.exe 2320 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2320
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5caedd361b64f875383171361ed0806cd
SHA1d686933e7070de56a524198d18b7c25dfdf64001
SHA2560a240332b6c0ac950d1ca52a6818a4d3f5b0c8115091da66a79781276c4ca68f
SHA512a5e21e4ddbef4a94db45968d7fccb21ab887f674eff5df33289654c76b98f8fdb6b9fde9f75238a488159998a658b5d19c5ef031c40d0850422f23bc2e25bb8d