Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 08:07

General

  • Target

    ab6976489f61bc79f52f4f5033d2bf5a.pdf

  • Size

    87KB

  • MD5

    ab6976489f61bc79f52f4f5033d2bf5a

  • SHA1

    a7b248f247b3b2f5fb785ed5dd4f3f2c27604b08

  • SHA256

    98f10bd8743f096d8a11504ce3baadc0eabcec5ab4a432176c6ec3f4e311804c

  • SHA512

    0ae45fbac245b7e6d5d70f69b1ce07f86c5dc260de47264ea390140947ccc98ed84f0f3e2559ae1e42c30fc24e223e890e14f5d490eb553be6b49d6515748d60

  • SSDEEP

    1536:+91ZMAghXCLRGDU7ahVwzUFHSX+ssAxzHNnjxOeE2WApOqzdcoWQZJTpB2ixM6:KmAxh7aoDPsAxjNjxoJqzdciJn2k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab6976489f61bc79f52f4f5033d2bf5a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1184

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e6aa86e6de3383785a73953e302cceab

          SHA1

          71a6b3b0999f8bbf2505f32b73e27acb661e4d77

          SHA256

          e198bd6d6f19f0e545defda1cb72ff6885888252bb797949a8939143f2d0cdc9

          SHA512

          b5a58628de1bd6e9b3942b05f150c1e803bb665a2d8292205188a1bca78656b6cd34619e7fe6fce1565234fe1a86ef298468bff04031fdabaff92c1522ad4946