Analysis
- max time kernel
119s - max time network
120s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
15/06/2024, 01:54
Behavioral task
behavioral1
Sample
c6834474851485e5e2b76fdfba14b83f529b20bf3b36f459793a3a445b38ac2a.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c6834474851485e5e2b76fdfba14b83f529b20bf3b36f459793a3a445b38ac2a.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target c6834474851485e5e2b76fdfba14b83f529b20bf3b36f459793a3a445b38ac2a.pdf
- Size 110KB
- Sample240615-cbjlfsvfqa
- SHA256 c6834474851485e5e2b76fdfba14b83f529b20bf3b36f459793a3a445b38ac2a
- MD5 42e1644aa2d30fe1d6049be04617fe69
- SHA1 888cd7508d4979b450eb5ae83d9fbcb4951dd4a2
- SHA512 deda8cdf01a5e676a3b67ea1fbaa54477b05ce9c81f9583efc6de94f82d75ea5dca7bcb09f44b374f4a37f86349738bb3a825594e92a2017ec5a6c4099acc9e8
- SSDEEP 3072:evHmH1UueVc/ceT3IoHL7fnfg9hpfL0CoVOAcJsbblDALzfOZd:mmV7l/Nfr7vffCTA92OD
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2960 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c6834474851485e5e2b76fdfba14b83f529b20bf3b36f459793a3a445b38ac2a.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 3c0c79b4c08f1105031ddf117cbfde0492c4ca32b6ee17108cb1975db7fb11e3
- MD5 aff80d3dc0f68ea827f19be8b6cafa14
- SHA1 02d40a68b313cde8aa8f49013a2ddace0d7bdab3
- SHA512 1385b378bb588372793895ef5e131937b31a7fba119aee2adf2876254be845dac3ef918efca035ffbaad5601125e983e7afc68ef05754ed01a3aa4883103efd5
- MD5 SHA1 SHA512