Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 12:25

General

  • Target

    abdf267af6fcd587ce2d947e36165987.pdf

  • Size

    34KB

  • MD5

    abdf267af6fcd587ce2d947e36165987

  • SHA1

    c3cb8b5c10a65a1c4cb93aba5038aa0d712b9e6b

  • SHA256

    7e865df1ded15e3c9ab466f8745c7ea0da0ec2e9d97c5c973796193a874d8593

  • SHA512

    ab0522d12fb456c2cabbcc21afd2a0e37b582ea2cbc79656a522e4f772573259657f2a2989c17ad9a314a90cc259cffbea3b498149a02cf3c73898805ad4a664

  • SSDEEP

    768:gb0JsTJvYEQWy2fknQQwK90EXN3tLNOW9D+4c/9363Eg:M0JsToGfgVwcfBtLpDiFqEg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abdf267af6fcd587ce2d947e36165987.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5bdeae4b540136e58864c77ad1c40f5a

    SHA1

    441b444482aadb52709c08bdeb6717f5de3683d7

    SHA256

    dc7ccbf47c8c823142cfceeb9781706e724058151a0e11faf18f4a067f7565fd

    SHA512

    215505347797bd1a5a099dab5be3186e28914ff8d285f8fd68a20b734c21d5256f283f23007bca93b2b02fd2181e061aa11824fada0e01b7a71e0a8fc64866d9