Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
15/06/2024, 02:09
Behavioral task
behavioral1
Sample
cc3c21ed32d904bd58277f71cc883aeb35e5bbeb3dd18dd2dd9408a47869486e.pdf
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc3c21ed32d904bd58277f71cc883aeb35e5bbeb3dd18dd2dd9408a47869486e.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target cc3c21ed32d904bd58277f71cc883aeb35e5bbeb3dd18dd2dd9408a47869486e.pdf
- Size 319KB
- Sample240615-clltkawble
- SHA256 cc3c21ed32d904bd58277f71cc883aeb35e5bbeb3dd18dd2dd9408a47869486e
- MD5 8dfc5d4d6a04b92309c5604bbb893f39
- SHA1 57853098564f5e35df276d94ffe69df77800d7cf
- SHA512 6b1e284958e01fe80b0116fd8621fe32ab008e60c7350ad19ee2050dd9374d5d5b5c4ba7203ea150cbec858db1dd8e52e80b109fc8e7233788550bfb33cf7724
- SSDEEP 6144:GzcCsXEm/C49QYN6NJsaSm8MTkh9WaK+nWpzuwQQrQY0HFel03mAPmG7v9:GoC2cYNysaSJMTcXWpyXFelHG7v9
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2896 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2896 AcroRd32.exe 2896 AcroRd32.exe 2896 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc3c21ed32d904bd58277f71cc883aeb35e5bbeb3dd18dd2dd9408a47869486e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2896
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 3659a92d2d08fa84c88d2afdc66c35473429bf07ac50d471e4ccaa4327b1ec7f
- MD5 7829d1a9e87efa3c1d48785e50f5abf0
- SHA1 f4a53977464432f58665c9dad36b39c3ea6cafcd
- SHA512 f50836996f57720993cf8e4228379f08aad99c70dd90da82b46de55ceca410f0c73a403e1596abbee07ac6eeca4ba52506da0d5e4ac4f53e3608365c1a24301b
- MD5 SHA1 SHA512