Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 20:30

General

  • Target

    aa1601b8242a9cbccbd4cfbff4433ad9.pdf

  • Size

    76KB

  • MD5

    aa1601b8242a9cbccbd4cfbff4433ad9

  • SHA1

    368e2bbb2035ddd7186565de2f5a7afa4e862f6b

  • SHA256

    16d796f2b870cdb2f33dc52f4271df4cf5e59089f04adb418522bd0efa1d5510

  • SHA512

    d564a5522cb8b2f4ec28cc0b5efa1ee679b439d1e989ddbf789c343872dc19fbd1cf2a7fb6e941e8e03bb4e525e150030b1d647dda5a356ba6ff8803c530f39d

  • SSDEEP

    1536:kfcXXDt13hxVS85lpeSoQh0oNbZMcmxrZn71fEj+sQLa6iuM4r8M6L:mcXLRVvgEBNbZMcmxrB71sj+9LRiuFIr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa1601b8242a9cbccbd4cfbff4433ad9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4020d2ed9191cb3335b35e2dfb799f53

          SHA1

          4c08b907ba853eb39418da4e20a5716bbb47ea76

          SHA256

          febfed4c1470e8a28bb2b631bf01e565d7c4dda6efe5a0c847d319841119800d

          SHA512

          23ddb56cc8cc1281cc40bf082e47870c8c1ae29b326683aab40822557e74842281a3268d956d65be536ac96480fb987b9769d5d51526e30dee28c1eb8346af71