Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 03:58

General

  • Target

    aaf257ff41c2f6bc3754c2998ed190b0.pdf

  • Size

    106KB

  • MD5

    aaf257ff41c2f6bc3754c2998ed190b0

  • SHA1

    29630005d9d89dc6a8177d9e6025bdca3d387425

  • SHA256

    ea84d7b1231c683845f1997cb08f9821ff69fb6659e1fff2e07321d20d115d8d

  • SHA512

    00749399a680b26b7579460bf722cf744141cc47fc2c2d2116ba14ba6e9c78456614150deff5dd267add1ab4e88177037baff4bb888cdb203e37105b984af646

  • SSDEEP

    1536:q8/yDmLcyddk0VkoKSidViVGtwKUYEHqIK4IBJbTzchPw79hzA5W6pOu26W8ySLr:myTP5i/NtwKUYHwInbGw79hzAau2rSn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aaf257ff41c2f6bc3754c2998ed190b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    adb1fbd9d4b02f62fb2b3631a4741bc0

    SHA1

    c496283df4d07b770623e118ec562d4ee8b24d66

    SHA256

    4277d934508a471904e8033be992cb2efb44c8b559afba619f48948d511da1de

    SHA512

    76c21b9af93a574c6a56e5ff73c1a7132abe462d501f2f0f8b419845b6ea7824d4cc6f7ba43ca163e3c2a6b72016386e9185d44df487c5c9fd32a82a675625f1