Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 18:56

General

  • Target

    ac9bce774fc5c50bf201b1ebfaee171a.pdf

  • Size

    85KB

  • MD5

    ac9bce774fc5c50bf201b1ebfaee171a

  • SHA1

    573f4da16ec3c5361fcdcb5e84a538b57dd78276

  • SHA256

    8ea14511b86c8eb56a65ff008de9d7279db6ae1084dde9d1053663abaf755a38

  • SHA512

    d0ba89775617040843d6e04a102bf64ae82178d8e6461ab9f1b451e5772adca2a1cb22b713be1b3f63829dc898ba69fe0c5966e6ceb4a9e17e4a3b57a07a867e

  • SSDEEP

    1536:A2zLfDxvd4tSQPmca16Xeaio8lSEsN7nqJWYpO2+WAKgt1xDX3kygnaUeV:pfNl4tSQud16Xe5RSEskg2PExDX3kyYk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac9bce774fc5c50bf201b1ebfaee171a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d6b0bfc7b95424ca78a692c7d7d2d5bd

          SHA1

          fac6c1903845c143912d40205f52e017a34b5670

          SHA256

          b2c4c1a67d6fe97745f9416f2192323f41003ac2faff0fa96d905299816b5b37

          SHA512

          e2045580985d4a1a7fab19f78db6ee1c55c82296edc879b9a688a25bd3bc075cd53ad878a907e858d82547981958958d544f4e41396c6c173354673fd9e7e605