Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 22:43

General

  • Target

    6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf

  • Size

    1.0MB

  • MD5

    18dbfdf7dc042ec4cb50ac8ac3412ed4

  • SHA1

    4edf98b644888fa2abac74cbb3b103cccd7bf3ec

  • SHA256

    6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538

  • SHA512

    acf1e1449062832f97199047140d2165231050bf68551487be778488f2a299878ee751b20a3aec114f012c46658618050827aa504df45602744f9a8c010954c5

  • SSDEEP

    24576:yunefNkPMqeqN1lKS46pDwE2h5JX7m81xoiE:yuneVkiqN1ll46pRyrs/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6cec15239ac89a1f2377e5c349c727afbee0644687031766f5ed2d925aa5b538.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e1e529bf6b04c0a1a10ed9598e4af4f

    SHA1

    5ad114ab31295c45a0b164ec6f2c7646ca77f55b

    SHA256

    0c550bf4718a06d9b90998e0e16b73985248a3dfff1533d2c7c05edc6ca394b1

    SHA512

    a69870b6615a52b83e315171df5b218c7d4d6d97a42c5ff8ed0e614f62c0737a2feb137bb4269ab8e78f431be0c5c748825f1ee8169a00c24c41eb096742e0ab