Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 15:12
Static task
static1
Behavioral task
behavioral1
Sample
WOGSRJYBHI1VYTMZ6EQ.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
WOGSRJYBHI1VYTMZ6EQ.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
email-html-2.txt
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
email-html-2.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win10v2004-20240426-en
General
-
Target
WOGSRJYBHI1VYTMZ6EQ.pdf
-
Size
47KB
-
MD5
039d929f75b55ad96d33723e2d376558
-
SHA1
7337ad7cebeb2452a03e1c59c5521b1b1221ca14
-
SHA256
3ae5046906d08377612c22216870dd2829e8f404ac053450c6ce25cd9ce442b5
-
SHA512
e32b303a97cba3734086d55c32d2591d8a233b6c24bf64bf00a31360ecc97e99382d6c8eea9aa416a383292448c64be72109004791ec346a963e1dfcf6ea73b6
-
SSDEEP
768:ys4AMzNdfxpamedDszJBrvs8pxfnZqW+PIWneOykaFh6E1OsUUQblPIfvyWw6GeC:54AMzN133IszPDP+PIwyk/E10UQbmnvo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2156 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2156 AcroRd32.exe 2156 AcroRd32.exe 2156 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e531fa2d928d7ff0647584b0b8e8a77f
SHA1a97a062c441b016d7a2701ace44cf54c34636dd5
SHA2566a2dfc63d215459bf113cf75906b19ae99d115e883747e013efc327f5a6a56e3
SHA5124a78597db9910b5a7652211a058bc1a27684b695b7302b5f6876e18afc0dbddc9a39ad9bfc5591358da23f28607036bbb8b591a9e55e6a102fd2896a702dc0a6