Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 08:59

General

  • Target

    a1763b139cc8b9a77b4c1e91d4a3b6c5.pdf

  • Size

    9KB

  • MD5

    a1763b139cc8b9a77b4c1e91d4a3b6c5

  • SHA1

    b48066fbc9de174f33bcec509ecb2f8b9309ed35

  • SHA256

    94f824d2e00c1d44027fd197f86584766c3c289300b16afa24a357f8a2bde3e2

  • SHA512

    901d92499d2bd9708e0739de6e84b0b7f383d81c4f0bbf3e8d120d2a109fb23c5cd81e1980de340d1f3a11029a26e15dddd270e7246ff6e98f801450a76414c6

  • SSDEEP

    96:YBcj3mnaDCQcs8rimo03Livc+y4bLw9ygPo9a8g2ttOCs++jaOz5evfBfP7HkrsQ:Yyj3OBJs0i9qGcRRggCB+jaOzUkrs/+D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a1763b139cc8b9a77b4c1e91d4a3b6c5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6d93c7265e082f7e7cb52438f08cc072

    SHA1

    9e8636e22a8eddf01e84baabe81710d974012166

    SHA256

    f08c6bbc9f673e755fdfeaac59054408fae55c75628fd7588fedc256f1dc7f15

    SHA512

    8992d43584c69d3f5334c5c02d3db7994bd08bac2bc80ed488b602983a21ce6a406eaba56afa42bce73921216996d1e40ecfc01ef0326f62a866f94c88c3cea7