Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 21:52

General

  • Target

    99fffa3bcd5f99b78d861f529c8ef635.pdf

  • Size

    84KB

  • MD5

    99fffa3bcd5f99b78d861f529c8ef635

  • SHA1

    c7bf307b1af5722ba70e5f80b8c7f730c8c7d1ba

  • SHA256

    427b83af6db50bba3af9035973e725104986072373f71d68f002895524ee013c

  • SHA512

    a5255d0473c3d4e4af8afa3ab77a17a36430b9fb9101a95f14a2c79f1b56823188e25c60580ead6ced6f750e61515d1f995d74bc85782d24a0df66c2e8754073

  • SSDEEP

    1536:EeU8BQbRKUGyrZ02cR+zniNawBkALG+rAIkzXTxwBqlWDDUIZWbpONwbl:L/UfGyDLzni3HnrAIsxw0FIbNk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\99fffa3bcd5f99b78d861f529c8ef635.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cb9f206a7272380077e2d90686a8d6ac

    SHA1

    5de098ab05cf184e85b49994cdafe5ef9f7fe1bd

    SHA256

    eba0a2f15447e10ca9165b7099f0ec3cf9652d36c007295ae3890097ad573990

    SHA512

    9f3ab49fd5fb69fd8974fe2a854d150cee3e021c9fd6de8bcf97707d8be1fb77cfb8a52fc9280dc3c9b9a6e73e1d130008dc5832b452db2720477984af157e94