Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-02-2024 18:50

General

  • Target

    a27de85ff806f8bcdf047a6f433f675a.pdf

  • Size

    42KB

  • MD5

    a27de85ff806f8bcdf047a6f433f675a

  • SHA1

    1225f4450f1402bd41d7fb6b594c44115413e3b9

  • SHA256

    c1f4b77097167031b7807b3deab64e2556c6fbab19e367d6ceebb2d36217b088

  • SHA512

    c9ae18a560f8c9af882dda80983f758abf2d75ad314f1e1ac27c0f85b7368c342424016852a2b539d6c81a430f49357ff079c1d1741f96e57a66cff3d626ec01

  • SSDEEP

    768:Wdg2gFjJOMkMUTB6dgdEu3H3Gil5BJMZoC3negEZ5/QXl4UUXh3v:GMVhCldvBl53MZ93negnUXZv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a27de85ff806f8bcdf047a6f433f675a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e6a5e6120e531585ff2bcaf18d14767

    SHA1

    40ca588468218cfc237460ced194ed280d6c6d53

    SHA256

    23b34b6e596f36f783ced94b2464c32cf86e9022181bcdbfbbda8ba56418271c

    SHA512

    77644166d4daaa00f2dce35b821928eb5d7f60b2398509c4df15c357c49c3d7bca37f52fec314fec4dc726cba465743081013a33ad8fad806db2529ee6a78f02