Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 16:34

General

  • Target

    a9a24be8d72b13ff397089f9e39fc290.pdf

  • Size

    88KB

  • MD5

    a9a24be8d72b13ff397089f9e39fc290

  • SHA1

    74e7e67a4c7b31088ac4c3ef6b5ac88816bcf282

  • SHA256

    0fa485e290981069e018037ac8dca0c40b1a0c1d1fea2ceb357972f9c4970f34

  • SHA512

    d6955386eafa64785fa0b0073a533d540db63302827b12561cb374d87ad8f9289c5a78d1e608864e9d562f88d66b63a79e203f7677a7681960594a947fbb0b16

  • SSDEEP

    1536:3+4tpvepQ2GHX72o7P8sRVs4QPOTC+GV9+MeSsz0GkRoRdW3lJsWtdlnW6pOu2xN:O4tpvehGHLEx5P4CD+x7k24dl8u2NN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9a24be8d72b13ff397089f9e39fc290.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3194899203b436432fea569d547c13c9

    SHA1

    ad44e61ad6f0eb64b01b558dc27176528cfa0f10

    SHA256

    d43e5ed4f6e8ebdcca8ea8b5093fcd3ec1ff77a0b3bb487321e4ef3948376ef4

    SHA512

    07ea17769ff044c1af03adda203b874827bae192bfc501f170acd6c9b13a4117e99e3073f18f918b0df7255c648885b4eaad2f939f1e7d6190908ca075e2d972