Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28-05-2024 08:10
Behavioral task
behavioral1
Sample
e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf
Resource
win10v2004-20240426-en
General
-
Target
e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf
-
Size
366KB
-
MD5
5cf8123463caa8acefa3204145eeb79f
-
SHA1
218bf00a769cb5cb879f12162cb5f221aece3fe7
-
SHA256
e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2
-
SHA512
d886dbdb324d1a12036b66f4778f823f0159d95d219e055c318038d050c8ab9a03a3523e30f14b2352d685938793bf63d3cc0be6b79e69b0494cadbf52de124f
-
SSDEEP
6144:Ab+8sFyqR3M35aJd42T5nWTGdfeUAV1u1lIRSln9hLSnAZ8EdvdIz15gSeP:Ab+8sEqdyQZ5qyvAV1u1Rn2AZ8ua1d8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2456 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2456 AcroRd32.exe 2456 AcroRd32.exe 2456 AcroRd32.exe 2456 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2456
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e0a998fae686f2f29dc4f6deefdc5ccc
SHA1e4ba89d848e35c7381192e0b620cebba0da1ad30
SHA25633c28f999b5857d1e08447ba4e9a5da60d15aac14cce05e9e37376e06db04bd3
SHA512149365db4917eacf8168bbbdc94cfac120b851d6c2a8acedd1c32dca45fd01703052519cf2335d02b644e57b2d663b78aefa7e69cd0dadef4bc80ee7b492a395