Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 06:28

General

  • Target

    b6bc961d36e33b23335d606273d50400.pdf

  • Size

    84KB

  • MD5

    b6bc961d36e33b23335d606273d50400

  • SHA1

    014c87669b5a4a15928f6ff25274d3095ab0010b

  • SHA256

    2be6f1afb449eb7bb8c71237f34f99822aa4ae5191a587424761b8c528bf76c0

  • SHA512

    7dd2456c246565cf21239dae943cd0af3101e141fbff8f498202fb5a416364323d56a9afe87c54e4ada4520186125d0b7f054823062a2dd7948366a70eb47e42

  • SSDEEP

    1536:j3P1IrU0PsdMBgGCdt/fRjJjLSjcNbpZyP7WkNpOPiZhvXAWYWstmCYVLkBFJQH1:DPOLny/fNhOUyPMPiZCWsvrBF6V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b6bc961d36e33b23335d606273d50400.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e17ea227967b877f5b1411ed59b977e6

          SHA1

          b7fa6708b47e503e11d9fbbbd143d810fab5cc15

          SHA256

          519c893fcd5ce6d0fb48d8ecb1d6f04681c3216fd455e6b5ea1147acaa2e56ea

          SHA512

          6a41a63b777b736d5d23068f82e5f473e1283a72a0366171f6e13e9efe88c5e8d16e8ce2a7d250e13830674155d6c359298909701ccc3da64d8fe4a7c1c07952