Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 22:00

General

  • Target

    aa43c13efe4bd51095486180e1dd5ca4.pdf

  • Size

    74KB

  • MD5

    aa43c13efe4bd51095486180e1dd5ca4

  • SHA1

    5b204a66aab1941fd01d3bfb558a56fbd32ba005

  • SHA256

    5bc0790644011d5f2fc010319fade7c08c15cb8f8ad489d07ff84bc87e52ff72

  • SHA512

    8d42ec5f6b7a891609f85e195f5078a6dd0d718e2e2b39d30db488bb537c771e6cd7c310d8d86d142843113a1aab0fc263d4b68fb83f052c069c6110e297e412

  • SSDEEP

    1536:f8Qu7jCZJRJ8dt1fFzECA/7Vg8sN4CfCWHpOvvhmh6WTUgnI/ZHkw:Ed7jC7j8d3fNETJg8sN4CfCvvhmhVxnK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa43c13efe4bd51095486180e1dd5ca4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fec6deeeac27da2b2ec059b9ee29becb

          SHA1

          78001bae9d92e15272b0c1071239b7d38fd01b40

          SHA256

          0b4fab6d8c63153a8c052327de5ca3589c5530e0292d6d6d62a0c8b24eccac08

          SHA512

          b84e0899b0aafe98bb61faa4cecf3f1a08bb22d52cbb876ce715e8b6d81c4e6663b1c004eff1ee4b3a70dcc441def6151613dbf0df1fc0c21e5117833d4e710a