Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 21:33
Static task
static1
Behavioral task
behavioral1
Sample
Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf
Resource
win10v2004-20240426-en
General
-
Target
Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf
-
Size
259KB
-
MD5
f21497f906c74cc7610a6a8237187f99
-
SHA1
fb98da9d67c8b470d73848fc363d418902a46475
-
SHA256
fdc9008a42d03a26fe7dd36804329031f51a3d75f6b091bf0058938a4b6f65a2
-
SHA512
d13537a661cddcd90e49da86150238ed115f0d5e54d435b22d18dac0de56e1d2e79249be7a33080370340583b736ca9e6ba3e0cd6c4a347ed2729b36853d9f81
-
SSDEEP
3072:UwdBOjOxDsNSXWv5UoiMWvzo6fnHyzjbcIc0:UWAOxIAmvSxMW7oQyHQk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2164 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2164 AcroRd32.exe 2164 AcroRd32.exe 2164 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bb2ff5e0a4a2436b313a88603e06b1c0
SHA19ee921d52f3580a803ca793c2db1fb6e7683f574
SHA256dee0ab6d143adac044a388184dabcd69ff38860bd362fa1493b30f9ae0545301
SHA512add7557b1eb448c5881313f693b509ad7f64a027ce029298e6d49981b657fd6b4a1bfeebc10b030485fa8c37a6744478d7eee7f808b7a51da0c75b4e09a7afb8