Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 06:31

General

  • Target

    ab3ac522de86075a2cdd24d209d0db35.pdf

  • Size

    88KB

  • MD5

    ab3ac522de86075a2cdd24d209d0db35

  • SHA1

    76bd12e7f100f5b28fd278034e032a1cebf6bb2d

  • SHA256

    a4f6cd4871ae43ec82f1f2f24cad902d13fa0453c2ab03b18c1be64bddaef93b

  • SHA512

    94508c5561fa371583362aec608745113cb46ff3e90f32fca576fccdbe018f20e74ca92df2dd78fa213fed0cb953c41846b85d5a3df083bf09559b4f7593628d

  • SSDEEP

    1536:I+1B9JGIT9cim8+0YpHciS99ugZAfNWlnsWopV0C3P+WHiJOb0P6DWWaDomfyVWv:N3jpxY+iSzugZQQsWe+Cf7HMOYPmkDQA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab3ac522de86075a2cdd24d209d0db35.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f0cf130dde4683937aeac1bc58008da6

    SHA1

    de7e1ad589d6f05fbcd72ff09a184ff5cee25bc1

    SHA256

    294ef9c4d24281cb6be822d893999e1892721ecd1fa10a62e6fe87281086f369

    SHA512

    630e67e0ce6391a70088d9d74fdc6ae9583d8a924d44bcf5254ba48fb9d2c797cb547d00bd9dd09f1829a0215a39ddb18a5798bf55672e47260076d009a846fe