Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 17:44

General

  • Target

    b7fe52f5a8e0111069dbe16d7e7f64ae.pdf

  • Size

    72KB

  • MD5

    b7fe52f5a8e0111069dbe16d7e7f64ae

  • SHA1

    c3cc7ef123420aef85df4b33dbdce0ba808dcb31

  • SHA256

    75961f843522368fd6a4c73f041d0463329bce6fdf6952e0bc920f588cf124ef

  • SHA512

    29fdf6d9f2008ccb0227234ac05411aac99ec88e4fa5b8ea5c19f00516f67b5db379673f8b37bb85b578bf047ae57489f7a6b6f9dd4ce1f28cedb0a7ef903f22

  • SSDEEP

    1536:eXYtVJtcGkAEHyDbinaBAwVvW2RcQjMCMbo2tcy2pU1rmCzAt:OKVJtcGkAEKGq+A5qFtcy2prCS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b7fe52f5a8e0111069dbe16d7e7f64ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          15f2b5008d261d59deab7ef1e76ac63b

          SHA1

          b819164fc362f2acb9f0454f37a728023400ac94

          SHA256

          894def2d10faf2424850656e1d3d70fc022f334de02315dc16c006811b952072

          SHA512

          388e340c92651bff642ece529cd5aeb6de6d01aa4e86c1af0d6279c62f5af1cb1e952780ee07ea6fdf8a5485ef568cb2fb3fa6a76f5ae2608792b2512e5f85ea