Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 11:29

General

  • Target

    abc7a00a3ecfaf92ddecc7a1905075db.pdf

  • Size

    87KB

  • MD5

    abc7a00a3ecfaf92ddecc7a1905075db

  • SHA1

    15cb5cfe5fd9ee895cf8fad1ffece82aea01a6fc

  • SHA256

    d51d3f5c35e25d1bea5112f1fdb4834aaa64a27534fe278dcbc5ed023e28b599

  • SHA512

    b1b43905ed064bad636c540f3a329fdf346da7520819f585efd87ccd4e995c41381335b3e0ad017eb8eec5bd6258cd9556fdd6f4748e48259c3e7898343a5abc

  • SSDEEP

    1536:8VszNlBytdPZvnbVTRBPYo6d0q+dCLhEpCuKFZqXnGBkWnniq3eKSGljvvxW7Ghg:r/UvJvBP96KqQGhEpCuKDqO7F3+QvpCl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abc7a00a3ecfaf92ddecc7a1905075db.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0bf78e12972fd3df6607967c7e535c96

    SHA1

    9078baa3f989618104823ef94f95a68608a448ac

    SHA256

    9e6e7184a6dbc1ae4967df430c4d45ef2c962ad1010b273b61a639411e8e0121

    SHA512

    5f71dd9ac9e1a864865ec17aa1e9f7c55659af99d6682e50a40674a043552d94a4e1521d91618be7a0cedf4e5e603406c3761b2d98f41cfb6ba8dc0794fbd5fc