Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 19:37

General

  • Target

    a9fde7dc2ffed3305c7a04242dfe680d.pdf

  • Size

    40KB

  • MD5

    a9fde7dc2ffed3305c7a04242dfe680d

  • SHA1

    c7d5e9b4f8cafddf3e0925b64272bb67d70ada90

  • SHA256

    03833b1d655ab18c8350aca7377f7dac45e90d9f0dabe492c87cc3e74d1b68f2

  • SHA512

    9eca4b25876138a79dd4668807a93f0bd0e36616ad99ae01f21ecc5a3af105882065cc5bcd4564a544fd69e5cf944675a49666af51e331643646137e86662e8a

  • SSDEEP

    768:5ZdAhhVdqAt0OxJzfMhnKbs77YURCrH9I1+XWFPXZQVyWfpgiN8lB+kjzS:5fAnVdRt/ERCNW1+VyYgYvkjG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9fde7dc2ffed3305c7a04242dfe680d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2664

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cc6425095d8c8d4855280c6debbcc02c

          SHA1

          a17e948ecc96d3920e083146e84b8b3574c34e79

          SHA256

          2f95b6918ceaf004a02371464b133e1f52f8962a0159f57c3dccedf2cb3d66da

          SHA512

          a635b16aaac1d86c6be90ace2f169c6a879efdaa5d98263f09a52ab4fd1304c45902f75ec52831a1b129ee14f23bc70b729dd40a3fe29d94387318acd079fc01