Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 02:59

General

  • Target

    aad380bac216398d33a67d593d4ec2c1.pdf

  • Size

    42KB

  • MD5

    aad380bac216398d33a67d593d4ec2c1

  • SHA1

    be768acf13993df927921850c6514460146c1997

  • SHA256

    6db8609690f87cf94a62a9f6d8ce5d1478c3ed5fb79f6a9451f220d5c325dd30

  • SHA512

    61ac8a7226c912dd3e41fa2cfcebfe4ec569c1bead7457a742bc4030764892145a5092d2fd7522f6fbb33b744096bde5665a465edfb1bb14a7f3cc991d2a5e00

  • SSDEEP

    768:23kw3xcJ02bKA5PxEDJpv8txmFD8Oi/cTLEvsL6Xz6NEst6hIDT:23kw3xcy2bEfICoOaoLnL61zhIDT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aad380bac216398d33a67d593d4ec2c1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3bc3e5bea06773e6048c8e3d7492f52f

          SHA1

          0e37b6260549a7dc187c3b2b89c045f16e3eeb64

          SHA256

          d97e071d3200a224235d13cb963ab8986709bf1797497aa3cacb52e13a992745

          SHA512

          abc0ff0e8db8e2da6b9a9a74b128fd3efc78864b266e4c3db47ce52fd20d6198fbe7ca6cff514c0dd9c0733a91b40390ad8eda23bc93fb5f4c7fd6c37ad2a35b