Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 13:58
Behavioral task
behavioral1
Sample
??? ?? - KOMCA/1099Misc.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
??? ?? - KOMCA/1099Misc.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
??? ?? - KOMCA/??? ?? - KOMCA.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
??? ?? - KOMCA/??? ?? - KOMCA.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
??? ?? - KOMCA/msimg32.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
??? ?? - KOMCA/msimg32.dll
Resource
win10v2004-20240508-en
General
-
Target
??? ?? - KOMCA/1099Misc.pdf
-
Size
220.0MB
-
MD5
65062141a5aa00068b12b74a85d67b41
-
SHA1
5ba2d2c53978b4de3a123d79fa3ed60e93d86a48
-
SHA256
133be53c484a7d2f18f7919a393b60f4276f7900417bcd7bfecdbe977e750fb4
-
SHA512
d9bdde0c7293acbdf4410b454cfd9a1ed6d645b69a108d88292cc3008d42909934d269d03c94d06e4868b1b2d0c6b0a260a3dfaacca9338e227452c307998231
-
SSDEEP
3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWp:
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD50f236f3881cffe412dcf0ea94cab73b9
SHA1d3638042cddcdc23163f2c3f7ac1bf2026add332
SHA256882c967dee618a3650b3938389236e169ac735995e91fcae321f3ee51f327366
SHA51261c12a6a180ecb144e3c1737b8537b428d007fa03a5fd9de58bbd91e727eff6ab71bd76e9aae58747a20ef1d9f7622407ab2f418ae427b7b7e53721d1de8e80c