Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 18:29

General

  • Target

    a2741bed9e8390f1c2302833e8f8b82b.pdf

  • Size

    86KB

  • MD5

    a2741bed9e8390f1c2302833e8f8b82b

  • SHA1

    e98a2e6f1c005832b199650cd0d47e9ead4164a1

  • SHA256

    c023d7813c239ea09e999d19ad7b1c86ad2cf61a2aac0dbd7b3ead4c2ad4e96a

  • SHA512

    8431608372f61ed0b6dee75bd47de0dcf40ee7012a3c6679d73cbd9b021c5f5e5e43173c3ac69f7309d5988202af39a8082ef7dedbe451564503ad692bac0c91

  • SSDEEP

    1536:mIWK3bkpV7mkQkezuUI0FHGBNilEjGkC3jhjQzv/Dm1PhDL1AxmhJlzgr376rWsu:RYHrlAuUpFmBiZ3jhsjmNhC0/zOGe1TX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a2741bed9e8390f1c2302833e8f8b82b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fa83e576afb34ea1e0470a0aae7b6d60

    SHA1

    e3a5752bdc74e5613fd5bcc22c895ee2e8fa85e2

    SHA256

    9b32e75390a646a9b73e5e1a7394a004bf27ea0e87c84978241df000026fa279

    SHA512

    c3b45c415eba6b9a5a8865957cd8941475f027c6898174f1bedb30d766ab9c2768e7d91ba050c7e8f8b77f7b3b8952a22b45bb0ada8e26a2daec6d71711b03f6