Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 13:19

General

  • Target

    e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf

  • Size

    3.5MB

  • MD5

    e53a21887aefcb6716cd58f0ef191aa0

  • SHA1

    34efa31964c24520835da3621a95beca13a14cca

  • SHA256

    e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf

  • SHA512

    bb8a4cc005dd5b77fba0533904089385d07e1899c0aa68a6d1a0c4da1ebaa651642aa562413c663c882399a5a2e0161993ed83bba66ed0bfacf18c9d97a80283

  • SSDEEP

    98304:dYgzDtJEb1/8oEkjAENPK2tFLDZah2uHDA8j4yd+MFLnXf:WKDnkXRvZmHDAdy0MFLnXf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2c6d3200999efb14af90cd100e58cb64e081095510fd13b738eceb8a80424cf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          53b0be28096605cdf84df61b513cec74

          SHA1

          50f19b1b93223ac325930e7f997e6a2938be2b8f

          SHA256

          74e45710d6e82205b7c10cebb77e6f4852981c093bbf4c12f0763f3765d78da6

          SHA512

          ce16d60ca8de7ee701226602cc646ec9cca7c70d8e77f83fa5e2aee02f0230d6b4bcda0a3644ae23187bba1f7d7893d9000dd43cb90de98930c9e6494ed1f1b4