Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 06:47
Behavioral task
behavioral2
Sample
[email protected]_2FA_Welser Profile.pdf
Resource
win10v2004-20240709-en
General
-
Target
[email protected]_2FA_Welser Profile.pdf
-
Size
257KB
-
MD5
53b68ca1695ec08a1745d894f5255c73
-
SHA1
5ffc5a1ae0032a6f1a3207a3a0da502d4da1a45b
-
SHA256
16aadf612b4bd42fd8b6d971f622f51021155fe2d01087193f03f8ee1dfd3779
-
SHA512
5446cee4935cbd2dffc9c2fbfe1ddc72eac8caaccc59ce3227aab69cdff382f0258008ac67141515f91800675d5b9ad9489b20ca5f048748b31e53ed578df278
-
SSDEEP
6144:z4d9JvojW+/aIVZj9uLb+nnM9dcS8BwtaIa/yn+dC/iS90+Sx:z2AjB/NjCj9t8CaIO4L9RC
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[email protected]_2FA_Welser Profile.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50dd6116a5ce545e840b05c7b57354351
SHA1fe58ae5f078bc17d8126b2817f0a96baa905da31
SHA25633bef485ac5cd2dde6c49e4e74fe369ffcdba016176f9c8e8176b48f267e15d8
SHA512a14ffec7518fd6d79cb615cad8cff836444097a2adb20f0bbf7e1eaa2ddfbcd784543f0285f2ad2a3c328f17fb25cc36b549d704b02ff0d2dc8e13a86bffd435