Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 02:01
Behavioral task
behavioral1
Sample
917ced4b9515d95eec1e1515c10f6de91d6337f242071cca84f048fbaa220151.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
917ced4b9515d95eec1e1515c10f6de91d6337f242071cca84f048fbaa220151.pdf
Resource
win10v2004-20240704-en
General
-
Target
917ced4b9515d95eec1e1515c10f6de91d6337f242071cca84f048fbaa220151.pdf
-
Size
127KB
-
MD5
af71fea08fc393a921e58ffab07663ba
-
SHA1
9b070505c62c980d1abbdd577a3f24d69b69356a
-
SHA256
917ced4b9515d95eec1e1515c10f6de91d6337f242071cca84f048fbaa220151
-
SHA512
00a253e2564cf60afb4c3de729a66378519fa30253583453a079633dc9ebbe77d6e8cfb70a4a94ac5cc301f290b02a83b5e3adadd043758c4401ef749befe20c
-
SSDEEP
3072:tAci56CLq0wahjnvBmH7mgWjZmf7Q+oon4:tLXHKjnvB+mSf7noon4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1480 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1480 AcroRd32.exe 1480 AcroRd32.exe 1480 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\917ced4b9515d95eec1e1515c10f6de91d6337f242071cca84f048fbaa220151.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1480
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD596460a033d0041ea4bed7b6409c5e6ec
SHA16b8c4aec355553e899872d2078effdf6ff56754c
SHA25676e871c0ba8a9a77109adcbd9265be587d371c29e8d79a78f095748ad0e80e26
SHA512b85ab56f4a9503c065c6cc03d904a4b05324708cab9e88441fbb2bff6bb62b819ccd909c8565b17ac60ed4fc3db642f38791ff795b6eb415d7587f2652948038