Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 19:04
Behavioral task
behavioral1
Sample
131f2a190b646a8af987352d2c1c21422e37d161952cf3b6a2599c0242707967.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
131f2a190b646a8af987352d2c1c21422e37d161952cf3b6a2599c0242707967.pdf
Resource
win10v2004-20240426-en
General
-
Target
131f2a190b646a8af987352d2c1c21422e37d161952cf3b6a2599c0242707967.pdf
-
Size
392KB
-
MD5
980f37683103be34ca3a0c6a86ec6724
-
SHA1
ae27b3060cefa464a38167ebfa2dc11779d566cd
-
SHA256
131f2a190b646a8af987352d2c1c21422e37d161952cf3b6a2599c0242707967
-
SHA512
b7c01483e7614e16aa889d7c7e9d479dd83a66f58470a7b3da31844cbf0fa7ce4bb8557e6517aea0e56f8cacb75e485ad637c53111ac17da7e87bdbfdd54f4bc
-
SSDEEP
12288:eH++G37EIGkD/5x1fB17mrPExcLWImKLB:ee+GrXGa/v9nhITN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2388 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2388 AcroRd32.exe 2388 AcroRd32.exe 2388 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\131f2a190b646a8af987352d2c1c21422e37d161952cf3b6a2599c0242707967.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50218c3cc9835c02116c491d33b60a2d5
SHA14f2f1c82c91788d60712949b4c25d7bc78253702
SHA25688931dd7a7f60dbfd3d02dcd945f836b03fede86fbbd68551b738a01c564aae7
SHA51268df7e56d590318c0dcd99c4377ca9477d9e65724b9e26be671914ccd9de4f9eeefaa46be3c4be727fbd6d75eb24f7a3dafab59621e680778891ef1dee999e5a