Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 12:16

General

  • Target

    b761d09f79568c912de727a06a329359.pdf

  • Size

    78KB

  • MD5

    b761d09f79568c912de727a06a329359

  • SHA1

    11d89a1d65f528fd753947d4f812629e8b76789b

  • SHA256

    998cda49636d5a9dc486ee9034cecd50e44dfea182d9a12b676987fb92027e4b

  • SHA512

    3da81d502cfaab4af6be3468bd5a78eb4bf64c17268894a634c70b25ba5a8938e859bf775b0fb1d3193bc63fe579296464b4f13554a76803712a495836379891

  • SSDEEP

    1536:HKE0gmrA0lKIFqkhl4Wme/NNwpRxF4R7i5bXJfl1o/J/N0WWpOxUWJG8enjf6TZh:h0jrA0VFqkyxs7qxi9SVsbxxdmyj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b761d09f79568c912de727a06a329359.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2971fd3c59bfe5f87f84199a0d932ce4

    SHA1

    c0b735938ae1c8e18ae7d2db2afd3f9ccf3e0cd1

    SHA256

    350243fd089d8f488cdefc74b7b17fd52ae556649624b23774158f949af2e1d7

    SHA512

    0dab5b06a4863ebd97054a15461e3584f053c47c9fb0e5a09c4da5d6aaa9dbb024b3fea7a899161953e46d11061ad1e1cf32d28a24b38da995cc411ea7650f8a