Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 01:01

General

  • Target

    aa9a00759e50412d601eee63e7a5b13d.pdf

  • Size

    89KB

  • MD5

    aa9a00759e50412d601eee63e7a5b13d

  • SHA1

    84623887f3e075a49611bdcdbe93b1cfccc56150

  • SHA256

    7eb9cfc12001544ef22fbc30868a382985587a85426eaaa29065b63abbefcc7d

  • SHA512

    3e5652d817c9d69a145f4992cd812106eab0407be0601346c2169336e56f25fc06c87862bb09aba3a448edaa9e6084400e2bcd444f71db2eab5ed814686ecbf0

  • SSDEEP

    1536:MmiFOoDgq/9TyNm8FkQQZgbx89ISFMkhFyLJQrplpoTWkNpOPlbnpKWTN3HoP3:6FOkt/Nydpb+9J6khUAFoEPppZBo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa9a00759e50412d601eee63e7a5b13d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          98f5ca61ffa65f1dce546ffa47acd81e

          SHA1

          7e68c2d5c57bbcdd149d0209f2617296ffa7cee7

          SHA256

          5614090df8c3dc98b1b1775b7660b2ad58a0ff5c1975cccec20ef97cca5f44fd

          SHA512

          02183e80ba47ca4dbb9319148f192e195c6db3488f363c07c583681349d8dcd7e4ef45e471194e240d265ea11ade4251d374879d8e9c147d96f319fd61b7ca2c