Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 15:20

General

  • Target

    b90d3b765a376431f337aab35442d7e2.pdf

  • Size

    108KB

  • MD5

    b90d3b765a376431f337aab35442d7e2

  • SHA1

    9a8eb35646472fbea7562a48edb6138eed3a1611

  • SHA256

    ac2dd9f443d11b36e5f6acdfce5dd564a4021ef3b6337b3005a4dbe7288b768e

  • SHA512

    35d3b2270029bb703f64aac8aa39f88ff472d27903d1e0ff4d117a394b9feadef5afeb86e0384b291b2e7a8ec2f3289f015eb81259b7878557796bbece1df71e

  • SSDEEP

    1536:nstO090kVP/4NNx9w+TBc09r7g1pRczVqGSu5AtcQ/w9hkPaJO8qULJGU6UWcpO/:WlJtwNYRCIttubO87LR6vyKP08

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b90d3b765a376431f337aab35442d7e2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b83e2efd8eef87a0bbdde53412580f2e

    SHA1

    edbb508f406ab7c522c01564c68c3fd070618592

    SHA256

    f21576c6883aed0db8b83820ddb21793d9ff7a66641d3047160fa04b48e4d97e

    SHA512

    b26ac5c19d657557dc22b17509905262af69afaf53881fba197b128d83b5613eb174bf119ff2b916074e94c48e0285ca144bd284ee590918748616cf9e1e60f7