Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
30-06-2024 03:53
Behavioral task
behavioral1
Sample
fc8b9d4331a3b7cc6510db3af42c2d794a91bf85f51497d55b7dd9251673da4e.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
fc8b9d4331a3b7cc6510db3af42c2d794a91bf85f51497d55b7dd9251673da4e.pdf
Resource
win10v2004-20240508-en
General
-
Target
fc8b9d4331a3b7cc6510db3af42c2d794a91bf85f51497d55b7dd9251673da4e.pdf
-
Size
1.8MB
-
MD5
4684225654be29a48fa1ed65e5c378a8
-
SHA1
92ac498360910962705ff6c392bf1b8d947e9fef
-
SHA256
fc8b9d4331a3b7cc6510db3af42c2d794a91bf85f51497d55b7dd9251673da4e
-
SHA512
324cbf0aaa4036f1248493dcca90b64708bba0b5c0b8a3d84ba27f8d62bcdc4b3134ce1c9965107f1930002f1eddbcdbbc4999601e956878b9f08a7da9e88826
-
SSDEEP
49152:ghNEWLRTmlfGA9TJefjDVN3ujXbaYJY9SY4:UbcxYNabD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2848 AcroRd32.exe 2848 AcroRd32.exe 2848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc8b9d4331a3b7cc6510db3af42c2d794a91bf85f51497d55b7dd9251673da4e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5b2702a587d2d2679a40c499363fa016b
SHA1c2ee42be35484935ccb4b6b92f7076de95535afe
SHA256ea7144ea7665c4cddf36b77775e022e7c976a456d4091d17b05ae26e90111cb7
SHA51231d757ef7a73eb36d8c6c6d78742e0f0b74cc1a1bdc1ceaddfc765e963c6a500063faad85b19f622395cda94b8e3a23c7ec5f390cd57065d6f8e1e7d12bd017a