Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 06:05
Behavioral task
behavioral1
Sample
f7187cfc41395ad0354c6b74d42291c8e179abe94ac3b74aeeb3519a503dfb4a.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7187cfc41395ad0354c6b74d42291c8e179abe94ac3b74aeeb3519a503dfb4a.pdf
Resource
win10v2004-20240611-en
General
-
Target
f7187cfc41395ad0354c6b74d42291c8e179abe94ac3b74aeeb3519a503dfb4a.pdf
-
Size
140KB
-
MD5
283e72b7aeca75203816d70a1b94daa9
-
SHA1
0e593419753f98403f9f05d615be8f67c8263381
-
SHA256
f7187cfc41395ad0354c6b74d42291c8e179abe94ac3b74aeeb3519a503dfb4a
-
SHA512
999283d581ce2d6b551f8af41462090e58a11ac49b92cd3f7f7b00ab4903b269be0ae7a5bbdc6e985cc376f39643e8482f40f9b97a9f46a63ae0098d803af0bb
-
SSDEEP
3072:rXA+i56CLq0VahjnvBmH7m7yjZmfuQ+o/w/b+Ahi3EpNfxv9ZdiRSZZ:rQ+XeKjnvB+mLfunoI/LIEpdF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7187cfc41395ad0354c6b74d42291c8e179abe94ac3b74aeeb3519a503dfb4a.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b413eb0a5b78888fe92c074a7eff5c73
SHA14f9695d807809b48fdddd372f379e32c88d77e15
SHA256bc07e4a4ce7886f17d2779df39b65fbefeee148208b90ae18f542a72979a8408
SHA512172da4aedc5830c2d1f90323f32890b41efccaea279ffcd0e044479452c0735baa3bf4aa00f56b3589161b70c66b72807d7a67720ff143848abe8cc30dcf1b6c