Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 10:26

General

  • Target

    96ee994dd045d1e0efa6bd106dc4068c.pdf

  • Size

    83KB

  • MD5

    96ee994dd045d1e0efa6bd106dc4068c

  • SHA1

    3fb03bbb2c4dcf1b1fb9db5787d3e818309212ba

  • SHA256

    2e220261843a44b869b46afc290b55cbca71d7b3f24f12536291122953663528

  • SHA512

    3b482cc7fec44d142811bb2d5081fe029d68cf28f60de242d7c8e2f5d3eb2809cf588ca521b85c9b72fa61237d44b9ae507a3d64186da661d320b099abbafb40

  • SSDEEP

    1536:vRZiSeKXdo4dbkApO8p+9aeDuEYviTxuzs9HhYHWMdbSwruUTgdARW8pO7HvP:JgYdaAn+aQYviTxosqbP0dAI7X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96ee994dd045d1e0efa6bd106dc4068c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5000c93006ada4981d3aab61758d4464

    SHA1

    511e9b185e8a37e68b02e08c7c38e6d4136d6d3d

    SHA256

    35c4444c25b9a56e96dcadcd36ed672d8fd1797874beb8a4b2cb052a0e1f6ab3

    SHA512

    0db37131addd7f6b73faac9f3d3fb1e8362e69b2bb71b5abe8f3be5cdc4a1e126d547dc6df66d57f05aabeb2bf6e60042e7714af7b1feca857522f515a420696