Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 00:45

General

  • Target

    ba1701db82a789fea32aafcc4b8c14b2.pdf

  • Size

    95KB

  • MD5

    ba1701db82a789fea32aafcc4b8c14b2

  • SHA1

    0cc41880ae0411fbe0a03b19db539771e9d5d57c

  • SHA256

    09f68af7edd9382647a876827e7cbcdd727945dc69ee1ced239c5cbf301fb180

  • SHA512

    627bfcadf3b77291a7095e3fc38c5a647824d15dd273566a30ef746a12cf5c440699c61bd71d71e7bdf3375909285b48c8d2361cc0f6587ce99aad31145a22f1

  • SSDEEP

    1536:26QpN5u4a2C7PI7JPkFEj9pKOfeIT3yXHD5vKPWohSzmNWapOtQHWko9ZSYf0avW:NQpNQ4jCoVJj9xGWMvn6SyStQqnSU0z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba1701db82a789fea32aafcc4b8c14b2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          db97569722450e01adc733a8a1425782

          SHA1

          b53fd3721b8a941da1f2df1689f66dfe04e8a8e9

          SHA256

          19e0183f7929276db39e799d91887117ead770ad236d38ee334846f1c867e18e

          SHA512

          ea31271072878e265d3b66ecfd0c1d19f562b9205edd879ed0f961890b781222105611633d3c607d6ab0af9eb24a0288bbe798e1355d2f418b7158a062b6631e