Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 17:47

General

  • Target

    a25ed52c80ea61f75cfde7206258ce04.pdf

  • Size

    87KB

  • MD5

    a25ed52c80ea61f75cfde7206258ce04

  • SHA1

    bca99c43019a56e32c795fc5ef7df40265851832

  • SHA256

    d3c1b93d5cc4524311133be2a3365e287814b7f28d6931a05ea6415fe34c164e

  • SHA512

    e237bf8441adc81ed3eed7f64b14d3331f83fde734b127c157a0540c824ebf7deae51ef6e4083a6cb201b2c4bdea25d109d43f8e0e7f8d0aae83af9cd74d9d08

  • SSDEEP

    1536:UDgJJzBo4loAq7ZvedM4NIFGp5Z6/mN/jRTn7OT6dtPvBpf/D:XJXSZv14y05Q/mNjVn7O+PvHD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a25ed52c80ea61f75cfde7206258ce04.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          366b315102b51dcc01d5b428f704f1ad

          SHA1

          e86e99d683a7246c19094fe26bedd21b05cfb2fc

          SHA256

          59deb5774cb6a10c031707cfca04138e30dbef368c7dc7c15cfdf87861481959

          SHA512

          87b425daf1b02c6a4329bed2a1fe333011574fe8cee6c925e4ccf461fb91da4d8d96b35191130998fdc8e6d16cd97af925eef06db7bb21f05e141388074519e4