Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 08:29

General

  • Target

    a169ab42a955ddbe7ff01bc543b0f22b.pdf

  • Size

    101KB

  • MD5

    a169ab42a955ddbe7ff01bc543b0f22b

  • SHA1

    5ed9cbfb8a5516dcc5ae60467b2128c805b89d9a

  • SHA256

    5b9246cf475f049b332e003b639d9f8244e6bd4e4c384050cea75dd8a357ed87

  • SHA512

    d99286ee80e5a44fc12ec106b0ea4b454c438b1688b2a4e6f02d0318468c7979e8da2f142b80bd3736dcec16d4c7135c118cfe8831de6910a6b8a6338251b9b9

  • SSDEEP

    1536:D1qmu8RusSK+oqnrzUBP1JCnGY4rJTtxCHQ394eo7FWLwpDwHpoSS9Im0vvV9Wsj:JZRJUHzUBP1thd3SjQHp9mYvvVERe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a169ab42a955ddbe7ff01bc543b0f22b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8550461040046e64fe7c3bdd7a68901e

          SHA1

          52150df2b34273f88a305f04686558d7b446d0d8

          SHA256

          fa75a0c22e30018bc0c88b2dc387fd77546a5e26db3d769d0ec12d76f0779be8

          SHA512

          190be802538e841870478e17e32710c1e4d2d0c13bcf339391ef96b60017a9e87f1a71592e476b3214658debcb8f4ad995f5c08f61d21db9a147ca6d62ec98b3