Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 06:32

General

  • Target

    a12dbee38f060d53d974745a7b8a01e4.pdf

  • Size

    47KB

  • MD5

    a12dbee38f060d53d974745a7b8a01e4

  • SHA1

    82c841bbbe9e5ec3b3baab443cae4ca2cf4277a7

  • SHA256

    b978f4d814ac53ad98a7caf0bec37a0300811620eb3b7f804e1b56512bda0ca2

  • SHA512

    03eb1928df1559def7740f9968b1ef486463e79631489585221c67772e3446f15a8d1653d5727fed23a4df83173bb6f487b1f7657c79de6f55ff1da23e5008d8

  • SSDEEP

    768:Q2KHbyPa+mZg01Ofi5Ju2hlIE+9OHSYxhZyf8XAwETZccEfgxq0q0x:Q2UIajyWJTW/YxLyf8QwETZn8F0x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a12dbee38f060d53d974745a7b8a01e4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c8107763f09ad530634302a507a5e0a2

          SHA1

          d17993023b0ea7c7fd0e19c40e8d3a82ca3f6ebb

          SHA256

          41fbe0308b3fb6a7e4a791d18145701d93d285734ac723bd250760cbcf411b63

          SHA512

          152607c44b2aff784b1e1379edb60852715733eada76ca3c1683f1aac27330eab74b5d5c42545fc39b17dc4db7b815542324aa0fbfb3c88e07850096df53ed5d