Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 15:23

General

  • Target

    ac3518eb52a94bf23737e8be54a0e0dd.pdf

  • Size

    85KB

  • MD5

    ac3518eb52a94bf23737e8be54a0e0dd

  • SHA1

    691f948f8cf6a9dd686d7ea641506d81a2d0dc58

  • SHA256

    c765c90ee23cdf349b924a8f9fd0d6505c2bda187e0b5615acc72fb26ffde4fe

  • SHA512

    10fbdc8b778ae4c30fd753eeeda822039a7d47a6c9bdc3736b93c8e0a1c692f677624cbe0ca675ed1d8be383384c103b7b905c9b9a66461f9bee88391244681c

  • SSDEEP

    1536:X1nV7ExIkrNjUOYqgvo9Vfi1CO3HZ+32vZ+iDMQon4eyb28UvWHpOvifG8tlGaWP:FnJExZrNwOYfoLi1lXZbYiDQZ7PtviOv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac3518eb52a94bf23737e8be54a0e0dd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5f44b54d4e70c5c589faefe002bd9f54

    SHA1

    cad3315587e23f711d2b7d1d5676bab9216cd85e

    SHA256

    3e359b371424f102fc55a3266fcd93c2fed18864905833482a2d68197a25e95a

    SHA512

    f801cb76177696260eff6d4269498a502b4ffee36324c16c90bd12812721d226358534ca65e0a8e4ad33286c57377f92c202bc73c6fb31064ee49b91c466aa65