Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-05-2024 23:43
Behavioral task
behavioral1
Sample
7527fb3eaf0e0ece0aa83c770fca05403747494ef6d6e61abf742a750773509d.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7527fb3eaf0e0ece0aa83c770fca05403747494ef6d6e61abf742a750773509d.pdf
Resource
win10v2004-20240508-en
General
-
Target
7527fb3eaf0e0ece0aa83c770fca05403747494ef6d6e61abf742a750773509d.pdf
-
Size
522KB
-
MD5
9352750366e2393292162d0bc536ecff
-
SHA1
1764d1eadae629eabb8b1c5e2dc92810696f7ec4
-
SHA256
7527fb3eaf0e0ece0aa83c770fca05403747494ef6d6e61abf742a750773509d
-
SHA512
a3519a604ff1bc8a8f0e0d5d3084bc1ac6b31fc5737470004e0ea04e6411ea69f0c896b165e49b82139775c18873ffe46265618fa4ca0ce76929da4931f92292
-
SSDEEP
12288:1LQ56nvRXvb+/EjZYEh6j/qaCwmOXyTUn0sqC/eTKGc+8HWb:1U5gv5viK6A6jSaI401C8c+Wc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7527fb3eaf0e0ece0aa83c770fca05403747494ef6d6e61abf742a750773509d.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fd90b80b96fcd4304c5811a85bfd84ea
SHA1e2e9f91cf23cf38f0c632634a79b9bfe43323203
SHA2565032ae1f951df55e45b21735d5a46da1b64bad27b5df81962a50819d90cfbb0e
SHA51286d2849456b6c096e083e4b0d502e70ecd4f268ce2e99025f35fdcb236c271b863b49eae2c84070da3ce443653653f1586a8b9769a28da390df1e9709e71db3a