Analysis

  • max time kernel
    180s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 21:06

General

  • Target

    a2c12e0d30092d024608a5c4017ca147.pdf

  • Size

    15KB

  • MD5

    a2c12e0d30092d024608a5c4017ca147

  • SHA1

    8f7926e7d0e501b9a7e6ff10a8a672eed6dc9d83

  • SHA256

    3238bd5e1388c9e01456a35c00b0a24215d7b55fda611ef0653a88d26e496831

  • SHA512

    97631de3b8b8dbd39771109e4a6c4d20a079418b33dbf842d08a9d0256c5f5e23f31292815f332f92686d4795f753ec824d1448d91e967cd325a01e7e869513e

  • SSDEEP

    384:LsFlS3K6XgKV7cAgdOpW+04B3kVdmllwunQvIFyKh+zL3r5:3gGzpDFB3gdklXe6yKh+zzl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a2c12e0d30092d024608a5c4017ca147.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          953eabc2e46c615102f92660f24900ba

          SHA1

          132da844b7a47475eb55093c9566efa80ed6b784

          SHA256

          7f3d463cd5719911e7ddc61e2e9ab1d71b4302662e22fb2ddf48964e964c6362

          SHA512

          5af352a15b8022c1a9390ae6f21eb11aaf683a5416a63a1ea3b08499ef5a41ad145685da75cde1a60ba053aa250f97b24925b617a355d75f5618b31105c5e503