Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-02-2024 17:51

General

  • Target

    a9c910822c4fb1ca3ecc43f318544ba5.pdf

  • Size

    89KB

  • MD5

    a9c910822c4fb1ca3ecc43f318544ba5

  • SHA1

    8d95b37b39228f0ad55a10bb60caa84d2c8c5a06

  • SHA256

    4fceb9f9fde1a5e6d41b41100bd9378b1c87a7e78ee5e5cf82d5ce0e5f9472e1

  • SHA512

    1234354783546d8005d2662df47ef98e5a032e34adf512ae7da271e8041f05abaa0ddbd8f1e40ebcd72c2a5296cc5ff0d355ddeece5e5e99a3a949b7f4fecd56

  • SSDEEP

    1536:0j2eK/jgNmiatTrTqdDXTPZJvW1oFon7Doh3dkpYpcerDgC06taQFWuprWxApOGC:9eQSmiiXTgDXTPZU+YDopdkUcQkC06oT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9c910822c4fb1ca3ecc43f318544ba5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9732506a2a52854058403e59c0c91190

    SHA1

    1d859e2ae3141c99631a47bc212efbe531fe3b02

    SHA256

    0ed1e7b6575945581daa8d766fbfcd963a3e5fe928bb0b4a2b2b399c2ce7b546

    SHA512

    0cafac234eb7a3bf94cad37473acce83e9d4990d44fb980b633ca1a32f46400cadaa3fbaf182eed3a933799363b737c39cd791ceb38770c5970434744236d565