Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 14:27

General

  • Target

    a2145331820741ba4a956f686b0a19df.pdf

  • Size

    95KB

  • MD5

    a2145331820741ba4a956f686b0a19df

  • SHA1

    e1da784af29bf1ff2690eae44a227823a12596ad

  • SHA256

    59013bd28b208550ac539d0698ac0868a409f10a6f3f19d50fe3b4e189b79b09

  • SHA512

    798f546e143ebb0e85f87ae16739a2866fda7ee2ebb26ed77e41840cba8a15694a380aa90bb3272f94a2ddba4422c699123fb8b9db3f88b0b4bae4f4feeda6ad

  • SSDEEP

    1536:MEwauKkBuanRzQ5bMIK0PUOx0Ik8v/9mW3t1w+M44LogfZWbpONSYlSWl9uKVGOB:CBuQe5bK4919TdM44LogfbNtl3UKH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a2145331820741ba4a956f686b0a19df.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1476

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a3289540038f98bd2e8f53adc1e6c08c

          SHA1

          cad7469c5fc4f2fff6526778ebf90ee9c82ecb8b

          SHA256

          9008913d2c77ef7c8fa8538c83df6f501da987e3314425abda8d0d91e79e6e17

          SHA512

          99951b2538a87b734b990c06c28befcb5daf1f60d625bc673ac01c28662999d82902671cdf9582b3ea953be3270c2543b1bbee83f4bad43b04a78cfe9df27849