Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-03-2024 17:06

General

  • Target

    b937833f88f4e8f147cdeba83f5a50f1.pdf

  • Size

    88KB

  • MD5

    b937833f88f4e8f147cdeba83f5a50f1

  • SHA1

    227c54aeb0d8675e3b58fda710bda53f2ae8be82

  • SHA256

    a1d022fba2f5bd9009d32215f7832db9e7e377aceea0705ab9be12caba28309d

  • SHA512

    e81ea333524509efd866b9fa9f9c51fb320410440ffc5f512798fe1438bf7f0198feab94ec015a1f3e7e36cec34afc76a50578fd8ecdb954ed1e0032b82e431c

  • SSDEEP

    1536:HLrHZCFZOBTPu81UafuNj1iXsQoaRGcvbclHUvkvgoWUpO7LnblDlW0+XYAB0Ske:3sF4BjtkNR6sQoabAl0s4L7LntP5ze

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b937833f88f4e8f147cdeba83f5a50f1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ccedb37052ec4dfcf3ea5a22c093c6b0

    SHA1

    44ea6b4950cedcf8c20f44a82f3db27ab1498691

    SHA256

    8a8fc0dd782f6b3977e9435633bee7ec49defca2016baeb21502e73eee655523

    SHA512

    9a48ea2f67a5744e5738a71108fcdea289f0d4d2ec8b4fd90f96d5516c11dba0ce60a5529e360996a0ee1f28d1ea3050ef106837308f59c7fa47fd508f02ed8a