Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 16:56

General

  • Target

    a248b64f4a0c0b0af385f1050f2a7f42.pdf

  • Size

    86KB

  • MD5

    a248b64f4a0c0b0af385f1050f2a7f42

  • SHA1

    c340a655a6675938a9a9d6b7d3ee079733738588

  • SHA256

    1e12581f442f89b0ed7678af7057ae90c425afd965ef181209c3ad8b0efd604f

  • SHA512

    503c0bb5462e09eb5f139dceac05cdf9f9ec62dca3f948c4abfb438a1c1a534a02b6851df4541cd6050626074d05e79c310c4527260f615ea14e8572864f7f24

  • SSDEEP

    1536:iBs5bPEA9okmUYG+FsfxOK8qOvMqO90QcrfWypOlWWxkk3sv5FMw9mepkvxVuNdJ:3bPThm88PkqO9DkIlDkCs8w9mepsViJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a248b64f4a0c0b0af385f1050f2a7f42.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          933280fe238d9ce44bc28edeefcdedb0

          SHA1

          55a378f3abf6a964fbd1264c2496968624d5f882

          SHA256

          2183b81167235688cbd90589470d4a9df40f2696e110b33ab5e250eff544d58b

          SHA512

          c3c1f29c4fd806ae30de33aa889dce146ab4944f1c27b4406a835d391336e94e235fbd9c87024c2ebb9c0783c3afc310a535476ab918d44f2e06a540b1342494