Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/02/2024, 03:07

General

  • Target

    ad888a9535d03748f2a15a90850b3e0f.pdf

  • Size

    79KB

  • MD5

    ad888a9535d03748f2a15a90850b3e0f

  • SHA1

    f396eecf0a4e8eac8e78edc08db63e9e3faa0bcd

  • SHA256

    912d8d8f97c8ff8c46359aa3e9a046bdc58d63c7462dd395a3415b2fa3ec6365

  • SHA512

    f9bc84aefff829f6c18e7f8c8438f33bce41468a2ede0cbfa3c860201c939f5ed059548aa5c1a2e0bf819b8125eb8557ecd8e2948dcd98fe1f41a2ec28021011

  • SSDEEP

    1536:ecg3hpb1posxFkRE+oB/hhgrwKjoZ7tQfubWeEw/9SGCiSlXW8pO+rMUn:Zg3hTpos8ZoBnbKjoZ7tu2Ew/9SLiSlv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad888a9535d03748f2a15a90850b3e0f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6fa5ccb2692d853390304c23392515a7

          SHA1

          d5bd8f1c66bf2826cf30121e100532dc029c947d

          SHA256

          2d8fd4a683edb23928045227149e2178760aabe6e1599215879589a97b7df8cd

          SHA512

          4f31003c7eb96f869c7a4046da5d63dbe86fd6e224c88d58eca091b97750641a5d1961034fb5606b2dfc65120b89357cb305c076446d2200578fc642dc537dfc