Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-02-2024 00:52

General

  • Target

    ad476a67de199f9425c2f3c7c8d5552b.pdf

  • Size

    78KB

  • MD5

    ad476a67de199f9425c2f3c7c8d5552b

  • SHA1

    b72749cca6a2636734edb3c75b67763394f72bb3

  • SHA256

    54301f11ab8e2cafcac9aca399748daa42f9d55bdacdccca9445d5c5966d5b54

  • SHA512

    127eae8191394f1269509ca3b4538bb99a199756e69433e6e7569d647a43c41d07e79cb2940cb560b142b8363e740424a15d4e26b3fe01260edd5870de54fe5e

  • SSDEEP

    1536:TV4/RjcrJ5esQJpb4i7CitzqhJ0sQMInR9IDUbNYF+JCETWqIhunVYsoOgfMBe:TKxcrJ5mxWJURu8ewjTWHhuVYpOgZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad476a67de199f9425c2f3c7c8d5552b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b2979f7226da2a99e526da5d300cffa6

    SHA1

    785a337a8a07cd87362e8bacf60b34a4bbca25e5

    SHA256

    09e70fe490359fe6583947f3dda7f69edab090402f90676a75d1b2a30b60d1cd

    SHA512

    e22f382c9482462e8b02ab4d5c942f8514d772426913f5d416849bead684b0719ac7fb718a410ef1164934eaf0faded69c3a05d5d9dff3700aef4c93b0bd5dcb