Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 10:46

General

  • Target

    b73a8017875261a3c6855b28267f06e8.pdf

  • Size

    76KB

  • MD5

    b73a8017875261a3c6855b28267f06e8

  • SHA1

    bb8d65b38d03a5527acacfde10f1325bf63173cd

  • SHA256

    5554f8b1f65730bf034d505ea8d86517d03acd938fe8cef4e506f302a6946795

  • SHA512

    d906efb82931f8a9e4ce6f03b848bbb793bc7b527d6929bdd20d5dbce8c1dee9214afa6442ff2076e9d9c32c39577cfc7d244e61699a35f4210f5389b1ff036b

  • SSDEEP

    1536:kfGZ8Dmc5qpDbfJ1fmmgbHtVsxU1a1XMZYPTt41LL9cGG5oOi3J:wVDmHxgLtuU1mXMZYPJ4139cJoOA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b73a8017875261a3c6855b28267f06e8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    56a9b3ec353f792ae0574cae1552245e

    SHA1

    d575c1fcc3fed2c0614be42a074b8044c6d38685

    SHA256

    e01fd27845eda46cf9464ae724f1f022d08e3363ce66641d32a846769463b5ba

    SHA512

    46be7789129b9acfa16123f432bef0a33afa4d360386aa44c120a87b082603458b07332c43639706ca327d7010f79321646af818364154e4df9fca5e909bcd3c