Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 03:10
Behavioral task
behavioral1
Sample
cff5ecb06e2c06ff8b93977ab1d4348b3d25caec81547d5503fa2d620e77be30.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
cff5ecb06e2c06ff8b93977ab1d4348b3d25caec81547d5503fa2d620e77be30.pdf
Resource
win10v2004-20240611-en
General
-
Target
cff5ecb06e2c06ff8b93977ab1d4348b3d25caec81547d5503fa2d620e77be30.pdf
-
Size
73KB
-
MD5
30c754489c70ebaa5b7b5d0e39b62dbe
-
SHA1
47c07161696ba01b09dbb29a3ac224ff030a9d7d
-
SHA256
cff5ecb06e2c06ff8b93977ab1d4348b3d25caec81547d5503fa2d620e77be30
-
SHA512
b9625b91534febecc8e143d85785344e0c0e548cef56ef8cab93d28e3df44b03337c5d4ced34ce3d263a11d59c3c9f79e9735c5df508724e182b0af9142838fc
-
SSDEEP
1536:2qN6rtnk3yhijW6+zqTLN80qU2t4NBXSElT9URwA4jh9ITjmzZ:OrJVhijW6+zILNS4NBCElTOROV9ITj0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cff5ecb06e2c06ff8b93977ab1d4348b3d25caec81547d5503fa2d620e77be30.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a228a095e8968f228f6409499574ccbe
SHA161e5d65dc471cf3e69500e2bf5b03e033dc76744
SHA256c757f134cc10e7985572e536ca9d14051f2c8b9e500e7724e6b7ca9c0165573b
SHA5120e376c3c7be1d1818ef117fadde5da0d78cd0a0bdaae940d2681677c60e511811950d2ea95445baccc84a8f5940e52938651817f6850faeffb08bb48b4f81b04