Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 08:29

General

  • Target

    98f382b040fe3c2c7a2a294bb847ecbd.pdf

  • Size

    78KB

  • MD5

    98f382b040fe3c2c7a2a294bb847ecbd

  • SHA1

    0309318b2f42cdc378e90a1f98ae1ee6d5da719e

  • SHA256

    46d44f70b98db5dc294846bd1652461d01134dac9c11abb9ecf02f49b0468b56

  • SHA512

    4e0befc22b965506781156abe6d126fc5c5c67eed16a5dcc34f63c7ed02e415aea781dc77247b432d529d0b88f5aa517d88bf59237022b932778d5e3d48bed7f

  • SSDEEP

    1536:Iso2OuWQuJI8AhXTC7iEq9Erf8gCnkrWpaWUd8ExgOWOpOaZjpSlBq7+66:FP8SUiEq9Wfgk6WmCgjaZwq7o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98f382b040fe3c2c7a2a294bb847ecbd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81f649cc1832f7a360308c646f4ff800

          SHA1

          53d8ee1c5a6032945ba371f63294ad886e5f70cd

          SHA256

          8ace762e15ac153531db7686b7371eada2e82c9c29720964908cf6af7d5f0175

          SHA512

          cd66cdcb05b3703ab134a5a8644f268b8c6e1bf8cafdddbc88a9e43a9f66df1051a6bfad661789f4daf807b95f18423b1e399b53f45cb15d054b41002888b2b9