Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 05:24

General

  • Target

    ab1a53018d3b6720c2d7f9fee5df7b2e.pdf

  • Size

    70KB

  • MD5

    ab1a53018d3b6720c2d7f9fee5df7b2e

  • SHA1

    f38709746f031f3ef30454417ce100d19cc33672

  • SHA256

    7565e54f6f9f6a5c86c273914d16b34607675772db45e9c522591de45b7a338b

  • SHA512

    af19ce4c6ac41518f44b0f443dd6ed5112253d17485ea41a29bc9844da0d0d82c5ddf3f10fd4adfae7d9b77a0cfc9445f85a4d56a08245dc3486bc30f96372c7

  • SSDEEP

    1536:SaFKpI+gJKQ71w5pvaEOEBMuPpvu01nkJNKdgC9bsnNPxzc9b:vFKpaJj7u5VaElGakJEnbsn/z0b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab1a53018d3b6720c2d7f9fee5df7b2e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ba343deca312104931fb1474a9685736

          SHA1

          c315f51702f9e24909b6792eb3875d603e48ffa1

          SHA256

          8c776847c81788cfc5efd5ed0d06d2bc51e4965e20334af692e5ced5811d906a

          SHA512

          6b8f585063caf47144edb13bda53e5f47cc38f2e998fa9237fcceb78e2f566e2d412a1c692e06dc29bfafbdb3748c5cf20f94995da14b2a2068cf83dcfe7cdf5