Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 12:09

General

  • Target

    abd86b7bd91265d61391a4ffd6110702.pdf

  • Size

    91KB

  • MD5

    abd86b7bd91265d61391a4ffd6110702

  • SHA1

    d6e57f9ba23d0adb3ae0f3aec5b29c92d2a41115

  • SHA256

    46835ee4edc7c1d25594d514cadeee2aac820bb2fb668a7c867be0ba5c4b0cfb

  • SHA512

    16f7550c796e5eff98d801f8f5e8b1c383dc1d7c7b94cae186c66d61361143173544a66e8936f761f06ea0ec41e7cc86ed7a0ccca90a5139298a0cb8f6c1aad6

  • SSDEEP

    1536:asNo1kbzMNKobALRFvZD5Fpj9QireSKQHWmppoWHwYHRQMElN+clZWbpONtfg1GY:c1kHSbA3F5+Iddg+qMEltlbNtfg8I/NP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abd86b7bd91265d61391a4ffd6110702.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7fd9dca522d25781bef1d67d40a34fe3

    SHA1

    63c6514960e72299114b923503daa4a2c5ae3f3f

    SHA256

    2b8b873be907873579ac3f0cada93bf7324488100fc8350732e2464d0d5007c7

    SHA512

    b7037807c8cff86fe80f566eef36c5239596d8ca8c1ba4722de9c5a2ecdb1dfc4f132fa3a3d18b9653bfdec728ac506d78f33b4f86d4e2a494563efdf0d1b2d0