Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/02/2024, 06:58

General

  • Target

    adf609a0d5bef2238440d9c0e0307b68.pdf

  • Size

    79KB

  • MD5

    adf609a0d5bef2238440d9c0e0307b68

  • SHA1

    19181be1cfbc60bf2a81d71357028ecb3adfd500

  • SHA256

    3e203afdbfff9c389a9fd863e6dfb38a5450b971930f29db444a008c8cbbf5c4

  • SHA512

    d6af122d04b6bc02a8280e16f8bdfc924a455f0d784f4bcb500aad5f8bc9b0a29928f5ce7810a60371604893990a64ef03e842042598a534e05981f600114afb

  • SSDEEP

    1536:SiQg/0W3OLo6ruwCNCzYWfjjMwXdA9s7C66PCWO21BTznBRQYKqW8pO7cJ8:42OsVLkcQjjpXdAWO66gu9jBiYKx7R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\adf609a0d5bef2238440d9c0e0307b68.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8418967c3121d24f79b74ce665971f5a

          SHA1

          57e2eb32199f4eb8498e1861398bf116a86d990a

          SHA256

          633bb406b28de1b488c427dc294a908414b59b5e4707ff5fc9a9c8219e5262d6

          SHA512

          9221564d5654dd228cbd28353838af57ec45812d4040364163ef0690811285e2d0a269140e97a48cad6ca33e279527e856d351383749c650d0db39552bb0fc17