Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
03-06-2024 13:10
Static task
static1
Behavioral task
behavioral1
Sample
Ausschreibung Publikum Symposium PFERDE 2024.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Ausschreibung Publikum Symposium PFERDE 2024.pdf
Resource
win10v2004-20240426-en
General
-
Target
Ausschreibung Publikum Symposium PFERDE 2024.pdf
-
Size
102KB
-
MD5
2312e6d5a36572b66b41837ec0feada0
-
SHA1
13c12b1326ea0779e290d90dd43f64b1ec54e9c3
-
SHA256
b75d6b163a128a98443ba47f9ca406254f8cc458e4d7d58f0cc95cb931881432
-
SHA512
027cc9704dcabb4b2cbb70f25d2276e52053afe4af2a694a52511e37de1df57f22a6b2e6a699df3762fa999a7b4472cb848299c8b2ec650688461251f6ad4910
-
SSDEEP
3072:Sz/eS0NZ9TV7wAc9XNAKkFPzNnvoR9Pb/bKn:SKz57wAc9XNAzpvoXPb/On
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Ausschreibung Publikum Symposium PFERDE 2024.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53647899a2d5ba7c85c434b57102a13c2
SHA181344a91b7bfac9be65af82c8323efca2d91758d
SHA2567b2de95a7e236ed08132741a6992c5795eee32e599cd8938e73a39e9066f7955
SHA5125ba9429db03e20de085f948e9d958a1e3a2b720b6d137c730fdc4cb78b8aedaa39d80acda94155c49e0af51ae48023ccec479d6cac250e38f451824dec6527b1