Analysis
-
max time kernel
94s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
07-07-2024 04:37
Behavioral task
behavioral1
Sample
e04dcc7245840b343bd5c9ef476f199bcf32b8616ea19d6f73f5aefb581dc2f5.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e04dcc7245840b343bd5c9ef476f199bcf32b8616ea19d6f73f5aefb581dc2f5.pdf
Resource
win10v2004-20240508-en
General
-
Target
e04dcc7245840b343bd5c9ef476f199bcf32b8616ea19d6f73f5aefb581dc2f5.pdf
-
Size
76KB
-
MD5
a023397c1042120d60052bbf1f173e40
-
SHA1
fcc4f723275929996ff717010d159d890a3d2371
-
SHA256
e04dcc7245840b343bd5c9ef476f199bcf32b8616ea19d6f73f5aefb581dc2f5
-
SHA512
9122ab8f5b3fd4d806b4bc13c88669063427e9e6cd863fd0b95ab53b838ab051977b2e5e830458b579e5b12e5bb54efaf423a47b009001697daae6769b3537c9
-
SSDEEP
1536:NZ9qIDF49NZOH2lU862ZeJExRpbKpaxnYNZciwJ1yRj7cy1fD0ncboQlr:rZF49NZiUxxRpQmiq0Rj7cyl06ow
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e04dcc7245840b343bd5c9ef476f199bcf32b8616ea19d6f73f5aefb581dc2f5.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5994ee5cfbe774aa3eee77a94e453a9b6
SHA1404773214edafdfb7517d669a27d9c6e2493fac9
SHA25699a672520dab791de30a5f88deb4252ac8177409e568e5f30c4e2c6c248ee38c
SHA512cdee07c617b4d78fd6e5e34e5e1291f1356fad17de4bc1295ab27b12fc2884b53f3721060db424498baca1fe8c5f23d31b6653ca2b716d74d1049859af2944c7