Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-03-2024 13:30

General

  • Target

    ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf

  • Size

    579KB

  • MD5

    7d233f61c554ca0566ee08ae763a8def

  • SHA1

    54a06a3c3e791e91392e76c87d0b977800b33083

  • SHA256

    ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93

  • SHA512

    5c68430ef4b611e5eacc809d1c0025acb2c14562a3eb73b4f180b984166ce1d8f40cd78d15ae219c1db9f81f2ff21155d5ab047278f4fd49f3911ee45f7ce9b1

  • SSDEEP

    12288:9SIA7dwgmwZQTASWCcCAQ6mkzSMmLGaNF:9SIAZwg2TvdBAQ6/Sgaj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebd640840f3ec1b10cf6592562f2b66d459d8a3c877488887bbe112331d14d93.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dbcc78a87d8e068294772771c656acbd

    SHA1

    723a3f6ddac0577a5823af5a2a8c7e1d05811244

    SHA256

    c1de612bcea83fcf21d4e839149df9a49dd0b91aa0a8564d24d01bae32bdce47

    SHA512

    edf18ad9589d3770b3083328c1b2d280d3f16677a49b7e9ab26da526df092d8acd1700e12a996e793a840b3a24b659de0ea25e32127aafdfccd2527161c1402a