Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 03:59

General

  • Target

    aaf27c784f1770604247b1c404911044.pdf

  • Size

    84KB

  • MD5

    aaf27c784f1770604247b1c404911044

  • SHA1

    8264117ade84d22f38a9413c5d6099e7d58a2cd0

  • SHA256

    8b8d5600d48e4eb772206207741f4a2b13f6cc66ce38866bd4cb76f22928b61f

  • SHA512

    78217ee4312b394058b683cdc77fddc93ec68cf0237b821101a091a7ae90faeea3e15430eee2ceb224c7564e41a853fc17e73c5cd21f46f21eeff7237fb2b785

  • SSDEEP

    1536:Phbir1kId2Cz3zk/skYmsTGSgYX6GC05AwTKWw8Io8GzfLMuWOpOaZB0zu1b:x8jDzkEk/0GlYXbm6nhEDaZBqu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aaf27c784f1770604247b1c404911044.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5136c95e7bc53ffdfb90b7ffcfb1890b

          SHA1

          45b73d3f45be99c27298d42522667fbb7cb59818

          SHA256

          002ee3aea5a609798bdce59fe1008385a4d95624b6c106247e7dfa25bec2d965

          SHA512

          3ac618f21938159192dfd8628b15123574c0fbb1dee834648c41773e5a308e67a44948110e3ae81954da9976bebac3eaa4156542b1464dbd3749b6bc5039e04f