Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 19:38

General

  • Target

    a9fe1d969b090e54dd330c7d1e1b434c.pdf

  • Size

    44KB

  • MD5

    a9fe1d969b090e54dd330c7d1e1b434c

  • SHA1

    a98f329013090a2ba58d4aad37de22077e6b88fb

  • SHA256

    7ef3a196263fd10f359db7b014e8e07527fbe1031bcd1bd3bea9c6f6086945b7

  • SHA512

    b416c86fcb87dc2b433437ad7d2c5c9b2eac0f8a20f824e2aeea4d3523fec0a113e5224e7261d605692276ce5cf5d7170eb5e81a2d27d06ebba49be5f4c75cde

  • SSDEEP

    768:szU3jMP6Bhm1ye8bB9Rgl6BY96COYCKSNu5vd0zyowfsXnwbKT:kHahm1uBIuFC/dSIxuzyowfiT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9fe1d969b090e54dd330c7d1e1b434c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    27e05e9e1f8b733d3e7dc9d48ff98f7e

    SHA1

    09bf8b274695750d0c53f5f35b96167a0455663e

    SHA256

    54f23c27f81f58704ca0802f6b93aa42f459236bf49f33d66df7163ab178b527

    SHA512

    a555fa9f9c64ca5f2fac360de5113447355dea6d5e414d228cd3cba9fef4b6de23918ae1168b3dfe36ecfc1b43c3609c246723287246bbb7ea2beb5a917bc70a