Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 23:07

General

  • Target

    67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf

  • Size

    13.5MB

  • MD5

    eca76b23635bd47c3693df187a4b1218

  • SHA1

    c15b2e72911609c16aa18c52cc73db3d7b7ddd97

  • SHA256

    67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5

  • SHA512

    f33db349b185ff7f59a0ad1a5c0d8cf1e6b2c1fdeb0f3cf13be8c2a47f9210d72570e636aa7d4cbc9308f4daafa16076f168b504b49ff15c7fd7a8468bcf5c70

  • SSDEEP

    393216:b2aYLocrS8eZO5hihEaiSZLQG3EPgXAThZm3:b2FocrSc5tgfEPLTm3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67f0c04fbb2fcccb1bccac41173ba1d547bfda838f5840908a94c273e03f32b5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d6652dd97fefd94c98b0387fb20e0a6b

    SHA1

    dcdfa301f0feed245f34402c3ad01c5d4653ea56

    SHA256

    d7e1fdf1a2227c52e8e4e7cc0f38b0d161fec3c68db8277e3b1818fdc6f2f91b

    SHA512

    683c3fc9f55e6e8d1167e81fa20b8525e491736de3d75d9f3f2846dbeeeca4c51a433e8cf5fe40dad8f1a37003b1eac8c2e66de5f7ac35fbee999c2616e104cd