Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 05:40

General

  • Target

    ab2359cf642c17619e58ea42d96e9617.pdf

  • Size

    84KB

  • MD5

    ab2359cf642c17619e58ea42d96e9617

  • SHA1

    2bcdd277c7ae1ad5dbfd006fe3eada647d16eddc

  • SHA256

    d82c527923ce676363dd66496d7b7c0a7f26fb8c72bba2bcf2fa5d3268b7b4f6

  • SHA512

    32fcec09f58a0e383e4862cbd42de6713b23280f62d16d44d7507341f2d4378dcc08885b717362409a93a080da3aeeecae24ec23db095f83ccfb9079afc4ab0f

  • SSDEEP

    1536:rrd7eFq04ycF09GQpPlP6bdriuRyFSU5qmWHpOvTW0oDGQb0zQaPAzStP:HNeFcB0UQp9P6Jr7yFAGv5oD14dAzE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab2359cf642c17619e58ea42d96e9617.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7c8a5a66e0bcdb80cf0e857e921294b6

    SHA1

    7ca134c004d3257c2f990c3aa89619218f3a12b8

    SHA256

    f7638487841cda211f1daa6263dbda26f241a3f976ac056aecfee440396c2e5c

    SHA512

    a1e8e03618a07f973c26c363d8c78abbca5f068ea17f267c2d24fd50a2bbcaadfbb7b3669c16096c050d68d0872ac40b44bc78439940f12e22234c0930bc4974