Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 15:09

General

  • Target

    b90827cf9a8a79c9f9b8cd35f4d79334.pdf

  • Size

    42KB

  • MD5

    b90827cf9a8a79c9f9b8cd35f4d79334

  • SHA1

    bff67d7844fc8f4911665fcb669cd678bcd4840d

  • SHA256

    e8c42674802e35e7dcbbda4f55a9b6178ba3343f0c83875e1884f793e18a7338

  • SHA512

    e8122f1ed24ad14eabcf36381f9b16a1b926d61fac3c5b836c0cba05da06e2cc38b11ce593c3dfde5e72fdf8b04494500b8cbe7572a9087f7204a2aaf7d3e935

  • SSDEEP

    768:915pDrIJhpOA/TuPkINDz5HPyUlzDbGqNILVPJcJHLSVZQTwfUT0rY4oq:9rxl2T4kIt5vJViqNILVkHLSVpUTCeq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b90827cf9a8a79c9f9b8cd35f4d79334.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ade728dae62dc6077f4f39578927c434

    SHA1

    cb4fa01b16b5ab35821d506913ad14fd6f7cf52c

    SHA256

    2fd4f397c5ed7b738ab0669fee74245346e25fca873d8e2a2ead4e25ae08d644

    SHA512

    c3d1003b98357f3ef238b14f122187cf2bbbf21d6630615389cce81eafff2f311a786e23e26d2977e242c83e49e2e97e1aa733dd2bdbc6932598f7675745c77f