Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 13:00
Behavioral task
behavioral1
Sample
fatura.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fatura.pdf
Resource
win10v2004-20240226-en
6 signatures
150 seconds
General
- Target fatura.pdf
- Size 141KB
- Sample240603-p83f2sfc3x
- SHA256 bb9abd9d18d6b24ca3ee42d1f10df64d0371afed9437ae33265854ade1f7607a
- MD5 3a524cde7e805fd11eeae7c3559761ba
- SHA1 47f3818010e290b232266f8f4e6edbdcbecfab91
- SHA512 b9451dcd2e95337def939a10c264dda1912379de7186917ce11d26d5ae6a53f63c69f091d961ffdfb89676e99cc4379ef77b4292263d0e673cbb8c7efa741d76
- SSDEEP 3072:aFJh0lj26SdwsFIwKO7iNSPgQ9AAVVrzp37NkbquiXID752o:KQ2LdwbOuOmAVVrh7Nkeu+w52o
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 636e4d21f5d7d47f0c96d935c5a1bd1d5e5dcb1ae0eaf0018001ab824686d45a
- MD5 656d2d8376f16f4ca67aac4bfbdca5e9
- SHA1 354931fa697210bbf2f26029594620df58ddfe7d
- SHA512 298cde7d97235cc2e1f415c8e4ab6f42df8fea968d641d172d5ecc772508b3a55125de13d9a147578005e86f7768bf7ea636d67be74457c608671a8265e60d7a
- MD5 SHA1 SHA512