Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 10:47

General

  • Target

    abb2473f703e50d1c0f8c03ab016ea5a.pdf

  • Size

    91KB

  • MD5

    abb2473f703e50d1c0f8c03ab016ea5a

  • SHA1

    d566c504c0e530fa21f84e272a911817efdcea52

  • SHA256

    a7bec19a581b1a73598f48c911307e2195c3a7b763d488e67c791a7f69c61b0d

  • SHA512

    33cc3a6689d956a26561c7c9b6c561cf0e07c361b5144db360a518fd65d74f6643b093a221701fb29400ea4cf2eb0d0f8d391e960be2b8c921304c630548c463

  • SSDEEP

    1536:W8gSJpzr0rUjK26hXCQ4KnpcmKlOWttA9JWYBLYP8zRzBejBTW8pO+idE:WSDjKVSspcBsvYP8zRzBwB6+P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abb2473f703e50d1c0f8c03ab016ea5a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2cbda9fea2a06aa1c346d1bbbc635ab5

          SHA1

          0194c1ed8e0d861a04d8f911a2c58f796e3169ff

          SHA256

          74bd4b94213055b29344d68e750c5f2034b15d0a876895c0fbe916298c1198fa

          SHA512

          b76d6b131b7676f802f1a3bc73da2cf2c398c4a5997b0c3df8504f419f1a4d65e8ff9d86f763ab68c280b4eaa1d95830db6a521e75d058578429035abe72ebb7