Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-06-2024 13:30
Behavioral task
behavioral2
Sample
Complete with Docusign [email protected]
Resource
win10v2004-20240508-en
General
-
Target
Complete with Docusign [email protected]
-
Size
44KB
-
MD5
f5f25ee1926cb0dcba66d939b29c1964
-
SHA1
990b4a739d88dff329448aeef584bc6617b18ba9
-
SHA256
59b45bedb191ec4f8eef416b0b27347f29a215ff421d33873bed8b4103f93a7b
-
SHA512
be573a4697b6b909e075818443ba7ebc9424270916a64444b449e7f526289dc962d83bdf22f06f461016f6400454d100e92593bed8297d988a5cb4e2441c097e
-
SSDEEP
768:h03RdfSqOvBeeVnnnnnUeOTGGBeq3p/h4Ut20+fyIuN4uepIxdwBTJtNlOklFn4K:WfCdnnnnnUdGG4q3pC10+VpIAJ/lOQhZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1876 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1876 AcroRd32.exe 1876 AcroRd32.exe 1876 AcroRd32.exe 1876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Complete with Docusign [email protected]"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57be8830c8398f7f844add66500539b4f
SHA1df89b43dd87038e3c0670f045012f2e8b40c96ff
SHA2560894b12d51b32a3f4c1c020ed60d63d23b25667d74e56f94ed5c8eb558448c93
SHA5122a19ae4a0ae55259d5ca19789eaf1ba9f003ffb75df57a5fca8cde54c6e2bec3fc7d62d208ae87fcf5bd808f613760f50aeb5b8f34ebffd08827d9bc46feba28