Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 11:17

General

  • Target

    abc12aeeffd6547dffa3f730363cf36a.pdf

  • Size

    35KB

  • MD5

    abc12aeeffd6547dffa3f730363cf36a

  • SHA1

    c6b6a581ab5cebd599698757bcb470f81533d26e

  • SHA256

    056a2af8629db4df252e376cc932be5d3fe84d408e6c89dc0e1c08642c9d4b5f

  • SHA512

    b9a961c9767af60093f229ca482b117bc1c83660aa01a8d5fe6a9100caae766834919413e8ac2b399ea919893faaa5ebe18dab768bfa42c0ceb6318d84fea9ac

  • SSDEEP

    768:nL/JzuBlkskrkdgla6v4osYuNljDK4m301NVjv/g:Lg5gCosYuNljDKv01NR/g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abc12aeeffd6547dffa3f730363cf36a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          52b49f06e410ad6b485a8a3828ffcf30

          SHA1

          f3cae31b3b27ac09cf5f5f024d6159f745e8d65c

          SHA256

          8ce95f828468f37a3b1c02b6ff5d54e1de138668c1bd54c4fd6ac3bb8e5c6ead

          SHA512

          cf8129e86e5667193fdf05efca0af50f4dfed977e1be0ec69e157e028af4524d549dbdf84a125a8cc38cd274056e405fff5ab60a8f85a14999fb2edcd0a66524