Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:29
Behavioral task
behavioral1
Sample
61cb3d276b5aa702bf29b9ab1201e9819b321dfa70b545ec537e90763f365397.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
61cb3d276b5aa702bf29b9ab1201e9819b321dfa70b545ec537e90763f365397.pdf
Resource
win10v2004-20240508-en
General
-
Target
61cb3d276b5aa702bf29b9ab1201e9819b321dfa70b545ec537e90763f365397.pdf
-
Size
95KB
-
MD5
82839e475cedf7061ffb076371bdf164
-
SHA1
d88d2d6c5d7c229d7f123ec1e362a08f6d5493c1
-
SHA256
61cb3d276b5aa702bf29b9ab1201e9819b321dfa70b545ec537e90763f365397
-
SHA512
e97a700587a52ed4c2a16618cb557971cda97efba2b9284d842a45c69e3b36706aac21ff2ce146b7cb9d94b103edf1b018efb6dd850b653d6c9123226526d43c
-
SSDEEP
1536:adzknKk36OJ8t4LmgeKAYLq0N3TQKLtlq3LyREEoHuqkxY/gJXI281rIscIIOovD:qzknK5OJ8t4qg9dDJDqeRukxggK281nu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61cb3d276b5aa702bf29b9ab1201e9819b321dfa70b545ec537e90763f365397.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD536390b7d52e349b2bbfc5ee9739ad26c
SHA1c5b797f7dba2805363389a1959ea2eeaaa7d06dc
SHA256f196000bb27d72e50a56392422c4cba2dc90ac0aed336f50ab5cf3a7444ac698
SHA5126ede8962fe7be2b4a116dce9712666c6e653e16064cd03a226c0a1792cf7e55515f8316a7c3d7840819f3078e05e03f0d4070a7b3a14c0bcfa3e259f6a027fa0