Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
05/06/2024, 06:02
Behavioral task
behavioral1
Sample
2024_05_28 Programm an BEWO_Pens_Angehörige.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024_05_28 Programm an BEWO_Pens_Angehörige.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 2024_05_28 Programm an BEWO_Pens_Angehörige.pdf
- Size 186KB
- Sample240605-grepnaga2x
- SHA256 ae85d8a997306cba69554f416382dd1497415514627605d4a31d8de79db4b9ae
- MD5 50d9a14c87172ddb66428dcc0be30bc4
- SHA1 054b403be01263f1c9652019401bd56767d16454
- SHA512 4446eac6b6fd5578a6c69a0a177949888c02d2cca070fc3148721ed8ab3c74b356236c068cc5d46b92c73d75aa906223c266f75c7224c1fde8b79b76978b9a23
- SSDEEP 3072:+GgIdmwzjUKqo3HO5aYgljN14Cq/qdflKKKzcJgucYjhyonHnLeMoHeG2E0AbknV:QId7gTgVn4H/q1DKdu5hLnHnqLHeBEHO
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3056 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3056 AcroRd32.exe 3056 AcroRd32.exe 3056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2024_05_28 Programm an BEWO_Pens_Angehörige.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 a048c80ef77e67d3e981c05877993eb4cc2d93d75d8c82bb07608e7f49fed44f
- MD5 eee89ea0ed8ec60348c6927187209677
- SHA1 c24b5b81498b64689b6914e53cb800c223d71ede
- SHA512 562bb707c4913a6c80e84a9e54e51583cb64bbfa39aa26ca749a78b23d932362c4ca66641f1534ede7fa9e0b98d1e22e65725f336fe5bc90ba286cc8911a7686
- MD5 SHA1 SHA512