Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 16:49

General

  • Target

    ac5ef84e908d588d01fb5336ee133ef6.pdf

  • Size

    94KB

  • MD5

    ac5ef84e908d588d01fb5336ee133ef6

  • SHA1

    51cc35d5eff09aa58fc8b84512a09dc19e0a9541

  • SHA256

    cd7534caa0ceb12eeca0e4611b8a0f72c0bb9a051846cccba25fb02640684d09

  • SHA512

    d66d78a72c406a2fab1dc724a76af82d430fe62d2c159f5e7584d9426346f5761b7f378a75d3e64e82c66a1b7474ac0115d331e38a1922b116fc63fcbe214909

  • SSDEEP

    1536:mQNxqgzhjh7j9/2GjezSGRbPN34lLcF4If0HkULtiM4EZvvUlWGpOK+NY+fWNeLc:9H7F5joSaPN4BcBf0EULti4Z8aK+C+w1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac5ef84e908d588d01fb5336ee133ef6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b927ef6087fcc4d35031ad8889966f48

          SHA1

          3f290fbfb8636bb1a3ca0a9a17e381d9c2843d9b

          SHA256

          56e2a95a63be332936511e750463cc675bbd199957364ad8cae452d23332bd50

          SHA512

          707e5f63304028641295712e7d47f27915018dde19941e2ca304b2102aaf7077433bcaddfb195b1b30518d389fb7265ee23f207c5380c79f88bfb76bed8365d2