Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 22:17
Static task
static1
Behavioral task
behavioral1
Sample
125edb66c9604c9e5aeec5b9c85f140070edbdc3c51a6fea5f79ec72230b370d.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
125edb66c9604c9e5aeec5b9c85f140070edbdc3c51a6fea5f79ec72230b370d.pdf
Resource
win10v2004-20240508-en
General
-
Target
125edb66c9604c9e5aeec5b9c85f140070edbdc3c51a6fea5f79ec72230b370d.pdf
-
Size
90KB
-
MD5
ff82a2a59d76ce7135046ecf65e17540
-
SHA1
59b40fabde19faca92aa7863488b5c7d83244fb4
-
SHA256
125edb66c9604c9e5aeec5b9c85f140070edbdc3c51a6fea5f79ec72230b370d
-
SHA512
c9f7d2bd482d213f09d43e0b28682a17343e2ff2f8049883e48f45d5f0f5c102b456ccb414ebf3b6cb6edbfcb324891c6a0966e745ee3f7d9f5bd6aacb096139
-
SSDEEP
1536:w21LUhC3TQp1ydlYhmTtkB3URL0aUNTp8NLY7/9N6J5Swk7EYFCLJAsOJZr:B6C3ULykh+kpe9ey8RNYBoEJBkd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1912 AcroRd32.exe 1912 AcroRd32.exe 1912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\125edb66c9604c9e5aeec5b9c85f140070edbdc3c51a6fea5f79ec72230b370d.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e71aaabdd969f6b534bbaf3f7cdbf310
SHA156bfc4c8b8708a7211fc76f9bb6dd1db2c287872
SHA25699a7d2851cf17a83c125f56280653d364a356bfebdf6df9c020b862a69110fe1
SHA5127e88ae65544cb7803874760e093a1b5a7c2683a466b4d54f1548f7829fe9dc1cd18eb11bf62fb7f49d9fab1756d3bbed539c369259a3c66505a3e512a454089c