Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 01:57
Behavioral task
behavioral1
Sample
242052a345c85bb26faaa9791c74084e9ac19c2e624cd47e8d16bd0ce87715d5.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
242052a345c85bb26faaa9791c74084e9ac19c2e624cd47e8d16bd0ce87715d5.pdf
Resource
win10v2004-20240508-en
General
-
Target
242052a345c85bb26faaa9791c74084e9ac19c2e624cd47e8d16bd0ce87715d5.pdf
-
Size
182KB
-
MD5
c2b8a8aff9f4d8af0de736a7e85fc50b
-
SHA1
1c772db0b0f9bedb2e0d481585c1282ebdc0de63
-
SHA256
242052a345c85bb26faaa9791c74084e9ac19c2e624cd47e8d16bd0ce87715d5
-
SHA512
23f5fa49abc92711277cb3ef5c9df097943c0fbd6d25b84c7cacb1db928cb2587cdf5b171169c8211be4dd16c39cd7b38ca4772a8a1ea3518c865e7116da291c
-
SSDEEP
3072:5PhDP8velqthOuQOIiDL57e8yf0SZSGOxXczH5463SJjLjP6eCqvj/fAXhM:5GGUvQQL57e8yf0SZcRczHq8SJv7wejd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\242052a345c85bb26faaa9791c74084e9ac19c2e624cd47e8d16bd0ce87715d5.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1688
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD556166a4cde0e9cf32082dfe780010a52
SHA1af32b3f7f786b99d3b5e1b0117063044f33c2d7e
SHA25604d776a21821eb7accb965426a96df4d821e3447a74117023866213290474113
SHA512cbdb581688948286de38ff3aad0d923b05cd17af46d202c07311bbbd5d016c6abb409fc322941453510dbf5f82ecfeb098139d17d90da8515425163d1680f458