Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 22:45

General

  • Target

    ad0cbb54266b8a0dae82861f72b21d80.pdf

  • Size

    81KB

  • MD5

    ad0cbb54266b8a0dae82861f72b21d80

  • SHA1

    4ae6785bbf72bbdca91d64c0a9f10c9b09f2ae80

  • SHA256

    f42866ac4318363a708ed4dc94f90cfa4e54517e7dc871b5b2617378afc97016

  • SHA512

    6bfed33fb20be195d96f73398b3c52c184be6fcdaab1076e338d401057a5a5d8a1f839366256e457620635534d72582ff8350ed0a7647e485734be9869dc74db

  • SSDEEP

    1536:kfu+TOZp+Pio8SoEQKc8LRogESyABd3eoNtlrqanIwWxKBKlmf8o2tKW8pO+QfX:CEZoMjG2gESyABdFNt1qppKBOmG1+i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad0cbb54266b8a0dae82861f72b21d80.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9de4928a1275b0a8a70e244dee167fb5

    SHA1

    c0882f0ffbfdee1c5b7e77d606a7ad51560db787

    SHA256

    7d67f3314d67035db7a675c6ab879b88166ae854df3fb720c0a2c8fd11e484d0

    SHA512

    8193dbadd144b1bf81aa51fa1ab9b18330ee31da5afc51ec8460a649c8e1ac1f7ed735741d09e6281be9b7886b888593919c5bf72c47f261c924c0430fc99959