Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
22-06-2024 16:41
Behavioral task
behavioral1
Sample
Manulife Investment Management Consent Docs#455435(Revised).pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Manulife Investment Management Consent Docs#455435(Revised).pdf
Resource
win10v2004-20240508-en
General
-
Target
Manulife Investment Management Consent Docs#455435(Revised).pdf
-
Size
70KB
-
MD5
22c40fe7135c5f814a8022f7703ff5e6
-
SHA1
5687094570de5edf3d33e0c6d20bfba02d9483be
-
SHA256
b51c7d1de410fb0b5ddbe68d4cefa302ad3d1d6dc9797dec8b627b621c7580e3
-
SHA512
04ca6616bb0450ae431d07c9172d372f79a1921fd25fc590275068473d7d8ce9860a8442cbbcace5b248cbf05100d4859324220bb801d4fbd754f883528bd9d7
-
SSDEEP
1536:9oBpNyNL+NI38jF+juVqyuNKpTZ1MxboK2b49W0Df:+BiLw+juVsAp/M6K2b4lDf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2856 AcroRd32.exe 2856 AcroRd32.exe 2856 AcroRd32.exe 2856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Manulife Investment Management Consent Docs#455435(Revised).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55e591b01ef7854467ff85cd264f801ac
SHA135589bffae0a956ff191afefbefd091a2775e8ef
SHA25631b2a09329d8419a3d0543bb4d561c3d436a0113d145b51440c3883dda8f688d
SHA5124a0a045309b05e29f2f93dd713f9b91efc06624d1d4be569d3ff662ce103c051d74eaa4410e8c466775573153887710d0e86b07dfcf3223b521b5d3f796b57da