Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
26-06-2024 11:52
Behavioral task
behavioral1
Sample
John Hancock Consent Docs#992622(Revised).pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
John Hancock Consent Docs#992622(Revised).pdf
Resource
win10v2004-20240611-en
General
-
Target
John Hancock Consent Docs#992622(Revised).pdf
-
Size
71KB
-
MD5
926d91b34daa807db674ca0196d170cd
-
SHA1
b1a7adbcdf4858251b693130fc5cfe97c5ba0669
-
SHA256
54f8bf1131dec0279303c7f8738daaf24b267fe6d9703489b0bfc802dc844f47
-
SHA512
967860502c24220cc5d59c21376ccaa0d30317407c0e0d6c2f2412ff566e203e00869b844a95beb2a85ceddf5fc9493f02dbb76deb66e968ec146d075ae37a72
-
SSDEEP
1536:QoBpNyNL+NI38jfHmqnKc6AV1vD+ttNaqwcwuJdgfCIry95L2oWsFAlCIiHXP:XBiLIHmqKc6eQqcXdgfC95CcI9eP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1740 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1740 AcroRd32.exe 1740 AcroRd32.exe 1740 AcroRd32.exe 1740 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\John Hancock Consent Docs#992622(Revised).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5042295831d93be4bd64ca3db9afb9047
SHA123102fffc91485135ab92283727f4fb64892367e
SHA256e0bb2b8103d9eadd1b90593c353a38ebb50bc41605390d6640d8d45df5eeffc7
SHA5126946027a77f769654dcef03814fa9f470992dd78d1372923645636008ccd8f6575c5cd54b6b44e9002e9f903a9ff8bd293bea310d7c7412138a484f9caddf04f