Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 13:30

General

  • Target

    abfe9fc7768bbbda3489338a15a5ca7f.pdf

  • Size

    87KB

  • MD5

    abfe9fc7768bbbda3489338a15a5ca7f

  • SHA1

    fc9415c6b945d22fc3f0eaaaa85f1d18d8b95a22

  • SHA256

    be6d87d5ae796b86a46adbda9d3de47d25e158bb97ca4163c0782cdef5197104

  • SHA512

    110ab26a9f59dd71718f008ac8febec178049617f0645e9f83dc92a81df654af879d7ced6f9d75f69915d103bee45319a8f216e8ff7f3ef77e06d69e0592241e

  • SSDEEP

    1536:jWczWnruCudrjRde2mcUHHyqM6XCa6G8NiQKFOS8WxIMeQoWRW8pO+JtJ:KczIyCul1de7c8Hb56GsCBdIMe9Ww+d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abfe9fc7768bbbda3489338a15a5ca7f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d04aeab048861f6332b7874e4bdd4424

          SHA1

          8a34000c6289bc2f8b9bbc4861c505f4d822e3e3

          SHA256

          24a877931060a1f908d85881ec04f310628d1d5ff0c77db5520b09d0656339b5

          SHA512

          07231e477fede89be0ae67eac950e947054940f6b33fdc24f9aa91c4a27053af03a7663a17f03e80a7a6765d64fdedbe8cdf3c6c707444d0e29af829eb4e76ae