Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 19:13

General

  • Target

    a2899300b58457e34d278bf3dc9cbe11.pdf

  • Size

    92KB

  • MD5

    a2899300b58457e34d278bf3dc9cbe11

  • SHA1

    cb37ab5a0151c3025a2ed0c4ba743dc931a88fb8

  • SHA256

    b35c21ab96d41f9700f7b0b3158e752f8b23e782db97927d895e1cea3e306cdc

  • SHA512

    751d937b1c8a00f7158d4ce77628ada8a0ead2194d8e92dc9c5437eeb6f6ce11b02b3e210034a8879587d386dd051aba9ba8be260da431a60a130ba9a480629e

  • SSDEEP

    1536:4w9suq0i72hfDKJ1OpXzSg40cKvDWjP6snLoUYl6ZSCVKt8WaD47Q9BJW2pO2UeR:h9suGIDK+ztJ8XLof6Zbab72W2N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a2899300b58457e34d278bf3dc9cbe11.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2c62671c4bb1b4a5e39fb45d63b272d8

          SHA1

          516a5e1174fbd4f31b03444dfb51bcc55519f8fa

          SHA256

          2bdef3b4439e5f2495940bfe0c29aed8974ad6d81dec03e7d397342a5153da33

          SHA512

          155d66a564f7a0eff55eee19d48357b2591be143d7aa9bf0975e2ab3d44773adb4d74a75c9779a8922687b41a2e1021dcecaebdc2b93db5f883d8241d1f1861f