Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 19:38
Static task
static1
Behavioral task
behavioral1
Sample
23c2486f84db1ae3dfacd29e4071a57a4b44b21084e779048f6a82606f20cb97.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23c2486f84db1ae3dfacd29e4071a57a4b44b21084e779048f6a82606f20cb97.pdf
Resource
win10v2004-20240704-en
General
-
Target
23c2486f84db1ae3dfacd29e4071a57a4b44b21084e779048f6a82606f20cb97.pdf
-
Size
90KB
-
MD5
5bfe12988ce991eb79152c0c874aa244
-
SHA1
641f71d8fa8c7577c3fffc368ebfa27f5c4f454b
-
SHA256
23c2486f84db1ae3dfacd29e4071a57a4b44b21084e779048f6a82606f20cb97
-
SHA512
b357c31a05545e672e9f75fe39f06ea5a60c5ce0a37679aa656f458465365d3c224655e0fe422ab0682600590b85fc878b3c739884f55045cc9d791d91d74bfa
-
SSDEEP
1536:Pz1cOvb8Z+/yzI+NAJAZLMbJME+BZ+6cRTnSxlKWAXhrgjUXHMtYd:Prz8I/nkuVI7+6cpntzrUtYd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1280 AcroRd32.exe 1280 AcroRd32.exe 1280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23c2486f84db1ae3dfacd29e4071a57a4b44b21084e779048f6a82606f20cb97.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51678f88f29cab581ecd168cfbeedb522
SHA193879138e96878abe3d5cd8c130fe3aa4dcc53e2
SHA2564acd4cf952811456997bcd2f5f55f4e0ead33d105508db89ad272bef1e3c1d1a
SHA512539ce0c2b66e891333bfbe766c92cb20cd6eac1a53c614e4048d8cd58fa10b68484d8701d28c8808791008c50ca4039865a59c04de1e8c6a82e0453587e8edb3