Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 00:16

General

  • Target

    aa83e4f23fbcf2207173b6cc27133102.pdf

  • Size

    87KB

  • MD5

    aa83e4f23fbcf2207173b6cc27133102

  • SHA1

    b1fed69c705622c4150a38634d04ab3480e1aeb3

  • SHA256

    e3093e9f308f3eb84c42195264d3a1a00dd04c78a122971ecb78b33fba24977c

  • SHA512

    8ed5a65836b6f18753cb7cec4e25d668893a933fca2e2629fa9b396028bca3bf0705b5842bee41040756acea6ae1b617cf15f9dd79ed2dd97bd5c82ee737186c

  • SSDEEP

    1536:B/iHoH09ijOM+/uk3p4s/+q3T2IcFcZGuAVN+PhZ+Wwk1t1Wu6NW8pO73iX:G004KMId4SnD2Ic2W+PhZaPu6M76

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa83e4f23fbcf2207173b6cc27133102.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    861fb21066c4655c9b249a35d5ea7063

    SHA1

    bfa570947e7f1ee8f699b006162dc3cab4ce40d3

    SHA256

    a0747936b001e712be32c662241cb340d2d3378305d177ff34cdd598241c102a

    SHA512

    0c2260ee1260c3579015c92c02fbe409fe5eaef87939a46601ccdacdf69d39946b21327bb14f9ca208eefd71dbc30a80fcac78e9c6777939e37c5bec17a384ff