Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 13:40

General

  • Target

    ac03c495a5b1efa38ad1e1bfff4f4cb6.pdf

  • Size

    62KB

  • MD5

    ac03c495a5b1efa38ad1e1bfff4f4cb6

  • SHA1

    a15650e277caddd3aec5082d316f028bffd3e1b8

  • SHA256

    119e05846a98a6950cfd6ccc23286b5935d090012c2d70035baf8e332738410d

  • SHA512

    e1b9cacfd58b46f6f881c3e4a2cd5fba57b3cb098b457ad15195ae780330c74b87fa0a4f32a645ae11d20594d4e9338d4e0122acb78505d13b7dfa1d9efcd437

  • SSDEEP

    1536:0XfStm7P3z62Z2qwHuMz730Yv/KstdGOmDh8ituhu5LxhC:WSIP3+2ZyOqIy/FS8iFxI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac03c495a5b1efa38ad1e1bfff4f4cb6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e3af8d3694fc5d2fd3de69f4f69617d6

    SHA1

    a1f60d0a16da9b24ca641e889ac4c3aa5fe88638

    SHA256

    0538b8314ea24cbae46a68bf1e1fb088ea1f910f9c2fea1908f588297ab30347

    SHA512

    dcd2e888e445223016cc488bbd02b138743712bb1be7dae4e137166c89ead78cbf2035eddf4dce9449841e56f28e1fc269e6a1bf82435ada6b16242db9664bb7