Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 11:19

General

  • Target

    a3a5f17b841ccca899948a4a144887c0.pdf

  • Size

    35KB

  • MD5

    a3a5f17b841ccca899948a4a144887c0

  • SHA1

    6aef06347ad7fa4fd7287464b9dc060b29af0f56

  • SHA256

    66e943e5afcd05fd6dc330efa4e42409d91cecf37c9e8256389047e3bd885120

  • SHA512

    6949c091f087325b8880731f4d21b6bc1d3d15d23b6d877b964034b07fa1378d48f298c2942c575b732f03cffe58e73e1f5ac6a8eefd82591a679923a300590c

  • SSDEEP

    768:MaiaI3Ve0GrsswzdJa7PoHGYWjP5nKz0ztLLJA6TFFc1lllYob2I7t:M6I3VenCCQHCVnaeFffcpiI5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a3a5f17b841ccca899948a4a144887c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f86f529cb8d528b3abc245e46e250337

    SHA1

    2d7a66cd433eb89686e98a1e360da68586d4de9d

    SHA256

    c3fbe7d5860593a1d7a46f1bb4bcb9f8e1e460fc7d24fadcd04cf9c0bc49eafe

    SHA512

    4cb68cd8b43872e677329c88d62662db9d9d061f302b674e8e9de48d6869b102eef112bdd1aea50917f0d31e66318fe2163811156ba5e77832ee240b30c3ab4f