Analysis
- max time kernel
140s - max time network
123s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
03/07/2024, 14:18
Behavioral task
behavioral1
Sample
REMITTANCE-INFO-3-For-Artsxslx.pdf
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
REMITTANCE-INFO-3-For-Artsxslx.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target REMITTANCE-INFO-3-For-Artsxslx.pdf
- Size 30KB
- Sample240703-rl82esscnb
- SHA256 2321f252ff4e033e6718bb0ff9d56bdc9032c1359f18f495a8c584181346f2ff
- MD5 8c4287b286cd594ae0e263a41bc6e7c2
- SHA1 a06bfc4df3ba64dc9ce41462752c796eec2d0930
- SHA512 87e79e59deeb41f8f2a98b34e5ca900990874efbb0f50454440bb9b5437f6c7521557ee229ee16cfdbd05e4b1b50024b1d82ff4a28f2ab7e8bb525401cf4c2fa
- SSDEEP 768:PUUim76N9ziuvjDqo52wWfCloiARsUutINICA0E/:P0m7gziAD9Qhfwoii8tPb0E/
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 40487c3d49b85d183f1e81fadc4d9d35228efb85b7d23fef9438f6d7a75a343c
- MD5 b0a95253db41a89f20dd8018944b192a
- SHA1 d415db73a3a5c605535a11cfdd1c4e30edc5d144
- SHA512 d2a359f9873f9e103228da510602d4fdc0c0ebd07255fd8170d7a8fc8cf24c4811effaf3656ac2fc13fbe76f46c5d9f6806a156f6828469a7888545eb3840ad6
- MD5 SHA1 SHA512