Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 14:15

General

  • Target

    a20d8f77485b915255a7aa0be097cb58.pdf

  • Size

    96KB

  • MD5

    a20d8f77485b915255a7aa0be097cb58

  • SHA1

    f3b23d9114bdea58efc6c8ebab0ad04ada7440f5

  • SHA256

    03cca9797ff5651d0b37d647a30c740f5ab05ead63dcec51f7f6e0c507fee544

  • SHA512

    17b26cab6c09b17f9d3dd84e1c165e8efdfe12e7986deadf13ef29f1ddb34954de1401899a3a7b4547199693c056f3b94c4d17feaa732df0310e443894b5e7a8

  • SSDEEP

    1536:nd4YYid+BKclB7YrH0MEPDgEjejtmE/fW7728WYpO2+WSY4rZrUis+8L2z18:r+B/BsrUM8DgEisn72z2D4V5s+8L2+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a20d8f77485b915255a7aa0be097cb58.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4d632157dea25c184958e389062c7309

          SHA1

          8f6854250f1ab471c97ed51a5701e33984c3db4b

          SHA256

          19c69dae72544709387bcc24c931100439f0cdb8f11dc3d6cdd7e6a9a88dca76

          SHA512

          50be518e80e13c88203ecc7c9256540018f4ac8b4c27a669b34e2170dc39716f75d7081b967fce152cee08987c56ed2b681f615804bff3730c02043e53540a7c