Analysis

  • max time kernel
    122s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 18:06

General

  • Target

    b553b083885649e463323e905b7e641b.pdf

  • Size

    73KB

  • MD5

    b553b083885649e463323e905b7e641b

  • SHA1

    b445a23dafd32377f4c9d556bd48795c6a520e66

  • SHA256

    19be3b5d3d3264ab98a55741c8fdeaae2d4fac611c7eb384a9c0f16235d2c0f1

  • SHA512

    2542136e614273d2150b0b6c033a2acc77e5bc4b3009b1406fc21ca3de3e320475818799631ae782c1fe54bed7c4c39783184425fd035d4e9f084652a832ef2c

  • SSDEEP

    1536:Dre8mUSATvoPr2t2L4W6ZZVTffTRvXhaItAv2B53YwMVXAKRqQZu/YeZg4Y+Zgnd:m8mAmr2t2Y5xhft4mEru/YaxY+ZId

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b553b083885649e463323e905b7e641b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cfe6939e3ccd0e2366b9fafc9a53fe08

          SHA1

          3afda8d4ce984820902ced93232b8f74df357aca

          SHA256

          77df4bff3bae92673f00fd1bdfdb30830758a778c2171aa1e26cbdd604356654

          SHA512

          e8fa49debc84100e2905dcb6a0792808198fcea102ae360fc1284e42d754c811622f0d25494fc189af7b4dbd61c1916d4bdca939557a55553af2c76e1c737acc