Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 09:36

General

  • Target

    ab93386a32261669027d43291c92ac3b.pdf

  • Size

    34KB

  • MD5

    ab93386a32261669027d43291c92ac3b

  • SHA1

    6bd3b463026cde4b7e731e60bce47e12be3e390c

  • SHA256

    28673d81fa5ab7734ca7466a8c5149744a054f2af67ce3e3b3378aab1c07e18b

  • SHA512

    142cad5914070c2214c4ac23db8a6a6227538e713e19327b5b78b61fed351e551ffb0f4309a7a8142c6701301b5a703f9f9513dd8003a727b29449f8e8d63982

  • SSDEEP

    384:JlhhFIE18/bW3shblhvbex00qLhUp4hNRemKfo9agBOCUSU0qRsBu2aGGZ5l8rmZ:7FIE1v3sVvbEifcm6ZjeqR3lqIhS+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab93386a32261669027d43291c92ac3b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1c9d5634f38c36ae82fd5dca7a47227c

    SHA1

    8fe2551c6d31b43cf5f862f121140d6e0c2c1929

    SHA256

    15797c4fa9d49b4201ca6fd7f56a587222945da0afc72a4750748740286f1131

    SHA512

    111ffb26f7b059b16fef790a752c528bf3bc1b084af9af66dfd9daf482dbd829af402075e9e0ef83399c5c657352598c2671d7bfa79d88a349755640daa49198