Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
17-06-2024 01:59
Behavioral task
behavioral1
Sample
c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf
Resource
win10v2004-20240611-en
General
-
Target
c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf
-
Size
162KB
-
MD5
d2ffd2c6bcdcd355358c42c2b4ec6c59
-
SHA1
a26c261f6a5b78d625f14c92f183aad38d5e9a3a
-
SHA256
c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e
-
SHA512
25d9ece26985282d32869829c38e7c23acc7e9eed20905d0ca994510e9ee39c3cca0f29f51bcd6b6bc481a50ec9e5e1301c0082a7b0d0886ef76e409ce81f5ca
-
SSDEEP
3072:Bf7P9ASPgM5VChclN1WZey7du/3VFpWx7g+Gu4ZIa1c9szFiYtZ:d1ASdO2W0y7dunkr/a1c9sBiyZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5393d3242a9257702101d5a1b0327ffaf
SHA1bead6ba4166f5faf6572a22a7e4792da4606de81
SHA256a7f18d47d41d89392c615c74f887eda85651adc33c8b0266290bd1b2abbb9a7f
SHA512055fb81b17951d17faab32cefb1619f5de6ea34d43c9e2142034782df4c1162db4e57ea316372c9174e585f28d4698cb59b1549b57b86070f0fd4fd1e04d4a33