Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-03-2024 20:42

General

  • Target

    CnwLdItiAD.pdf

  • Size

    252KB

  • MD5

    d8b39e8d78386294e139286f27568dd6

  • SHA1

    f4c5ebd39a89df3fae9afecab16e2f697e85df9f

  • SHA256

    52801ace7e7f2cc9a15a5c988bed7deef998b44a86acdd95c557683e1e1835ef

  • SHA512

    e4292687b880ffded3fba822699e54b7a9dc3c15810dcab0d652b5bb7f4806e336e2b69e0eafcc761a840f19d9e47b08149f1de82aff1ea6606fe74d84c5d12d

  • SSDEEP

    6144:ud6V9OzIFOZ9tdc0gBL4Z8bB8eay74BVS:++e5Z9nl84Z8bp74BVS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CnwLdItiAD.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93f2870214900fd65aa12675c84286bc

    SHA1

    15c95a70d356e3ecf209eeff7baf520d3704cb4c

    SHA256

    2eaaf72a8543a84272f2da4156a0f6b1787b9783bf0991aed3e91e051fc5dce2

    SHA512

    338724a94e1f4c817d9a5da14a87a8741e5c8279dd93dcca0854ef2a0adb27df631d24a3b247c0f73a1df6e6b257e05a26ff99bf54bd1b363898eaded4b25ed9