Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 12:51
Behavioral task
behavioral1
Sample
6576f84fecf9e2b65fbd09fb5624fb9defe965b9be6377805999b432d79f95b6.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6576f84fecf9e2b65fbd09fb5624fb9defe965b9be6377805999b432d79f95b6.pdf
Resource
win10v2004-20240508-en
General
-
Target
6576f84fecf9e2b65fbd09fb5624fb9defe965b9be6377805999b432d79f95b6.pdf
-
Size
46KB
-
MD5
d9bef9f3443094d924d0101eeac908f4
-
SHA1
86359abd7e7b4f2918f71d47818f1c494c3ff8dc
-
SHA256
6576f84fecf9e2b65fbd09fb5624fb9defe965b9be6377805999b432d79f95b6
-
SHA512
ce8874b79236b83d562791bfec576307d1027951f97b09d96ab3986eca299dc3b3855ed90c183b0feb37b95c6b725a2dc8c2b7aeba8f677e4fe5bbc461adfed5
-
SSDEEP
768:tss2ZrNNJqeUC/bLufNa+r6X6dSMCz+MB1br9r879O/S0RjcgjgxGCGqdVkk44Av:gNie9XufNa+r+6dSMYP9rW9adc7xGFqo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1172 AcroRd32.exe 1172 AcroRd32.exe 1172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6576f84fecf9e2b65fbd09fb5624fb9defe965b9be6377805999b432d79f95b6.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD562761b303b27d208c4f5e4f4a6ed1721
SHA10a350edc9048b38365dfb749f84b306516b2c48e
SHA256350cddb1e7f184ad57faad0daabd33752e4bf4accbce6b4280329fe1084c2a2a
SHA512eae62571c6291b7429a9cc3feff6319af54c4f41ade270dd5603d321ef20f78226fbff6bc1f57d205db04a9945c581f25ddffa53d75f739a40337653b1d6e8e0