Resubmissions

19-07-2024 13:39

240719-qx588sxcnf 10

07-06-2024 19:08

240607-xs7d3acc41 10

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07-06-2024 19:08

General

  • Target

    NEW PAYPAL CASHOUT 2014.pdf

  • Size

    679KB

  • MD5

    91d968587dcf2a59e28d35cd4ddd18c4

  • SHA1

    05ec0b7512a0bde9b1dceef4663fff7772c11bcf

  • SHA256

    b77a664c1dc520e85f4a6b7ddd8049b50eb4052b20a01e2a94b3345777f41ae8

  • SHA512

    dbc5ed3b1a996e332c3e139982390e79de0c82f5815b4d8e15f7cb11bb4872f6eac313ae298d4b19bf4a3e626d32b9270a00a26fb2d4049eadcd947bd6876652

  • SSDEEP

    12288:jpSeeG4cKCz94eviwnFIKA0uYqjoTRE5K36GMGDl8IU8vBE0Y6t6t6cIOgv09zOA:j0c4cKCz94ejnGx9jcROo6GMGDfU0B4n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW PAYPAL CASHOUT 2014.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c9acf9220253977fa5d1f109642c54d5

    SHA1

    1a3f54cf79db0e7fcd5e0e1b4c49202da50d6972

    SHA256

    024e8f91e40c2eb13eae7251e73f16cd9e4fe766102e7c0cc97994404f6efd62

    SHA512

    3277cca1b6ce0d760a0bb745cbd18e274f050e5374cc0999db0bbfee80bcd692a0912fa3451abae9037f035ce3b436b8c0663e6aff61d970b945c261e8898e21