Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-03-2024 01:29

General

  • Target

    ba2cac966608ef1a2ce26d0ad5b25c86.pdf

  • Size

    69KB

  • MD5

    ba2cac966608ef1a2ce26d0ad5b25c86

  • SHA1

    1c452256203737afe39f667919422b018d84158d

  • SHA256

    e11471fadf9116c20870ac541cb8061975296459a5e5efc6dfe1879651f430c4

  • SHA512

    b5272bb8e794aff4c75cbe998f23191b088e67b667d29da21a2fcc09840ed3a381164e0393dca38dea0c31c7877b66d4ba8e0ab576de2dbc2d76b90955aaa0f7

  • SSDEEP

    1536:10AQdCCZqaD3m8aYVZXB2ggHH5Vs9204UsoWKQqtqhWepOWIfOzsJHXPA:4dCCZW8akZAggHZTBadqGWv0H4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba2cac966608ef1a2ce26d0ad5b25c86.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0839e3e47d4ebcd58828ebdf7bf551e0

    SHA1

    ae09ab1420567d5bdfe4a46a2a99db87e08b0893

    SHA256

    79ea5c16889ed43bd95e3ad70486fb54266c2280a1f1a13c345a6136466f980d

    SHA512

    ab48db297e00bfa64aaa40493e878d9b28f07fb52d55ec8a2fcf534deb503f88043ac4ec87dd0a366aa42247b48699e0b348a52c73d8c2689da54c25fb08ea9b