Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-02-2024 23:23

General

  • Target

    a09bdec20d4533de420b82920853d4a2.pdf

  • Size

    90KB

  • MD5

    a09bdec20d4533de420b82920853d4a2

  • SHA1

    62da7563ed517b69d9fe038387ca5fbf25595c29

  • SHA256

    349602697f8cba57eb258b996fbfe35849c6a2e0c65b11af3c63eff374cb583d

  • SHA512

    23b9474df85b7f63febd81ccd62b67acc443d058b81edca1119dc7a3ce9706e25e21a8fe3cb6eb2763a2bcec4b884c4cccdd1b5eb5e2bcf812565c7318ade4da

  • SSDEEP

    1536:gaXCnKbIi8P2+jxZTugDjmQpBC2MEcEfGfnTKh0SFzbxVMs0ArWFJ/UD/Zc0WapP:DXmG+zu4lpJtcEyG00RBw5E/mVtQwVz4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a09bdec20d4533de420b82920853d4a2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    26937ec8044322d1e3fe69e02e61daa8

    SHA1

    4d04df77e10c5bf0246a0b6d77ff61174f10d6ab

    SHA256

    1e095726a65d5a8fa52f5693b61418160dfc43e2652163eaa413742134bc3ae0

    SHA512

    b7d0c10818415bb12641e222cad413916f6f713f1b948ebed727b50304ce849968e3b107557ca60ea262124017d089a17af62b1133803187c143305f05705894