Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/02/2024, 22:50

General

  • Target

    a08ad8796ffedc76040d0b9047898b28.pdf

  • Size

    84KB

  • MD5

    a08ad8796ffedc76040d0b9047898b28

  • SHA1

    c10db025802cbdd473fbf61f3fdc593141831c33

  • SHA256

    d2706a8a2fbc5b1d427ae95367681aa15777e4e99338cb98f95b8ff404b06116

  • SHA512

    f6108f8ea22adb1952c804d41cfd17cfaf4ce75ed0b77c9a8a4c742125ec6f8dd6a919e9bcf7e1207e29c72769cb21534e4cbbdd30944542872ba0b6e9e6b28e

  • SSDEEP

    1536:7Dl4Q7KCZAkAdB2x9ARF5D9tCAwW8pO7aj8JrcFWDlfImn/hDJV:t42PANdB2fsF5D9tb7agJYoIO/J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a08ad8796ffedc76040d0b9047898b28.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          af72c5c4055fecff94db4a2432ba7136

          SHA1

          253e508f184c35b83884c98923fbf31171632644

          SHA256

          04fcf9fc54a6bcd5d6ddb147cae2acf6f1c825a21bd5a1ab83e3163cb06bf4fa

          SHA512

          61c7aaeee00a88af19f77cfd524f8cd531aa9088734f4ee11601305ae082869ff7d4618e962cd1421581ed29513c77e395214d74a952b2fcf65970801077138a