Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-02-2024 03:02

General

  • Target

    a0c6ceb51dd69b94a3cb8288b55d2984.pdf

  • Size

    75KB

  • MD5

    a0c6ceb51dd69b94a3cb8288b55d2984

  • SHA1

    4824fda8305119c952c9e82aff20446e692a5e7c

  • SHA256

    1d1df470edf7df9d8fcf58090307d7dc11306ce8945b7bdc8d0caee88a0fa12e

  • SHA512

    1118da8b7a9d658d61826ce2c131354d71e0156055c35cced95818e13812a053ddb3b2c45665ac399574000ba0dcb816f443a62f2ad230d98bbdb91bde74b782

  • SSDEEP

    1536:sv77L5EQ0KUfrYRSpwRj3YqLzqZUX3V/yj3Fc/y1SvUzLkZm8UYLQGYB1OMaEVX:Y7hEQ0KUfr8cwISmUFyDSaEM4m8UYL3G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0c6ceb51dd69b94a3cb8288b55d2984.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    97c7dc55fb3b19ca445232ea4ee16cb3

    SHA1

    dd7e47e72df421be3eba2185510abeb12c505c44

    SHA256

    ed1eb71176908610a255694692c3d4d6f1a09c37287999fec073260a1fe954aa

    SHA512

    0ae1ac4801aebdf39f1082670818ee4718fefc89be972325ef6e41f695bd4f468fcd625c0950ec7e0f1c2560e684b0b08397fd68b36a62e4053003a129cef15e