Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-02-2024 07:31

General

  • Target

    ae061d6658706ba254fd741b87cf4e34.pdf

  • Size

    78KB

  • MD5

    ae061d6658706ba254fd741b87cf4e34

  • SHA1

    eb3f9055cce71c6ec26d56537ee9cd1a79b15162

  • SHA256

    a006cc0df6aa089d29beb240e9957ddd04326b0f96800b073fe93e1539b50325

  • SHA512

    32b68039ae3953bd559c90dfe019a0b5169259dfb24c210130402769adbcc120bbc1fe4011676a27bfb44765b4c8bac4f68bf9b750aa5993d74bd89d6d061e64

  • SSDEEP

    1536:s8CvuIjq5VumJgkFTaDNX3Z9cJBWuLjakjYxlQ2AD8WOpOwrKWh3wPJBNks098:/xTJaDruWu/3yS2iZwrUPvNks3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ae061d6658706ba254fd741b87cf4e34.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    efe23be29c9f7ec56dbdce238b9ef694

    SHA1

    b86b4f71027d7553802c47d1fdcb141b69463268

    SHA256

    8e2939066a7c05a47f460de9b0a7aaaf5ec2a745d6682e7e5f837539f17f7449

    SHA512

    7a6048845f524bf081983efff9857bfaeff3dffd054b5e17dbeebd65b61be8dbd6ce43bccd0a20da09ab31de834a6f4a6a24928ed2ba1f3caa7b65e492988d98