Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 19:35

General

  • Target

    acae076c60afc918c3343deabd210fe1.pdf

  • Size

    84KB

  • MD5

    acae076c60afc918c3343deabd210fe1

  • SHA1

    dd391ff1df9dc42cad2ac27169644a25e49736a9

  • SHA256

    6f4a114536b1a46230850f390bc6eca7b3b1642ea5e1bbb2999a3037b7175d0b

  • SHA512

    f8c8fa2d884393bda1686be5d05e913f4f5902e88cfdef5ae17dc71ee5ea5a80a42e9e4a0440d7d3281330ecf5a1f3c15d54e6cf4b4d106baa41b94e946e7406

  • SSDEEP

    1536:bpkEQUlwKymAvFLDzm2e01HwEF2RSgV1igKEJ7clcQkehXKJEM7iTcuWn6UXXO:tkEHgdvzu01Qq2RVkREBclcQkwK9OTcC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acae076c60afc918c3343deabd210fe1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    29ec62632d917a2755c17d427b172010

    SHA1

    749aa33526c8770b87f7a4f9bd3e5c725f2d10c3

    SHA256

    02e3ae0e9aec300d582e15fe191524d735f5ece596e4d33fda0414b9d433132e

    SHA512

    80dae84f6140b5c63ee25043d00f900ee11af14faebeafa6ae70c99858d75413a2108f38ca0e594942684c48c723c0d50bacbc42a25a703b3a683197410e35fd