Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-02-2024 23:03

General

  • Target

    a0916be080ab01fd27bc36746caef1a6.pdf

  • Size

    87KB

  • MD5

    a0916be080ab01fd27bc36746caef1a6

  • SHA1

    3763e787d6ac0712e6ca2ea0d0ad7d1d201c1ecd

  • SHA256

    1dff4525775322f0792e8a5fc2b9d897e4d89949ca1ef2b0b9cde3acb7555d2a

  • SHA512

    c1b14a4b5e609eb4a0e604fe597c81dd0aec59d52a132727774ac64bb7c82d8be0111cd67d74fa9d113b3a1d9d184f1b739f6dc43635e7e188971aba3b2d926f

  • SSDEEP

    1536:GVWigaRDgMtjAvLaCMwHNp7xs54oBPqmeRD0cn7WTsP2kDT9xkWubZeRjnV1yWOD:GWi7gM4uwtNxMBPqrNJWTw2GT3q1uLL6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0916be080ab01fd27bc36746caef1a6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    89113874190713cefa0dac07c493e0c4

    SHA1

    d3928dac47e745b7e0fa4bc84baf8f419fdadd07

    SHA256

    6ef60dd58f69d17cd1a704ebf4ed4f65d4e9f402fd0453ead2ace92474f98936

    SHA512

    d6a2122b41c2a806d53785dda1eded28cde48397b72a3a5370aa7756b380cf897ff33a1b0d5f0d0bc764affbe3b5b21a284f13e94b18fcf6d5b723edabf20285