Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 09:49

General

  • Target

    96dd3329098007539e1c37c22416eb87.pdf

  • Size

    82KB

  • MD5

    96dd3329098007539e1c37c22416eb87

  • SHA1

    bc081e730282cbf68eda80dd93b28618ec5da835

  • SHA256

    2426b5cfd47d5f9f15f4b3b335326e99ea9b26b221a7fcf861515e652991f21d

  • SHA512

    ed9b514ecab1f3c5f3c7de94f45e5e6e128d2aeac655426721af7912e90d49b823a17ac542364dc33c6577156cc09c3bee28d68fafdb3af1a4255723ce2f3844

  • SSDEEP

    1536:5Z+TNcKzT4gUZdMsRw59HNML5geETZ7P73f/Zvxm/Ovo2BqKQcif+J7YrMNdP+Q:iRxTydYruLEZ7j3cOv9BLQffS7mAFR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96dd3329098007539e1c37c22416eb87.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          68b100ce0e1d5638b6e079d64118229a

          SHA1

          34aca0e36dac48a05e3c140ddfc80b15ba1b800f

          SHA256

          3172fd92ab280aa4b84a20462e4183c0f78753adadedaea701387518ef6ab734

          SHA512

          badac997b312e776b8179d14162a433b35f058b7fa75be7c22766bafad0b9d73c29e4d8ff300e7b4ba6583e68c89bf9e8bd8c1815f16df4c7a2df6e23d6a9b81