Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 08:09

General

  • Target

    a15f18c7fd84f9c9b8a1bb0d5920b555.pdf

  • Size

    50KB

  • MD5

    a15f18c7fd84f9c9b8a1bb0d5920b555

  • SHA1

    9ad823b1273a8e2878a2325a12325f44ea321b88

  • SHA256

    416065fe6fade54910e9103906f2e6e7ed309286a0aabf97e2913cbf1c5836da

  • SHA512

    4bc991e834cecefd3ef97eb65afa4b7fc42dc52d1c989a9290d59f297e8718d276b235e60f7240442db2113c5924b0aafd99eec44451ad7d8d5969283ccb1fbe

  • SSDEEP

    768:NYfX6APkqjzRfnYhyNbrWx3/9f/5xueugsCusw7k+EK5ECs7M3P/qefzO96VOTl:4hRAYNbQ9X3UxCdC1E57M3PCCK96Kl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a15f18c7fd84f9c9b8a1bb0d5920b555.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    54e04a928853d35b832ea28943665492

    SHA1

    dac1b97c6fd3ea4034f09d0565826b73b50becfc

    SHA256

    ce12d0969b4de2fc26bfe5ebe1bfdab63056832e101c453456f44463ff30c774

    SHA512

    a0dda4824e10ea5c63640a8b4f56862b9ba5d9c2b5babcfe9a0baa07fdaedb6f8ba7fcc60e51e7f97d44f75d77e6099cc7f97ac536c64a56f63872cfd3f9ebf1