Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 08:15

General

  • Target

    2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf

  • Size

    410KB

  • MD5

    d364a66595f201e92824459036b9ae10

  • SHA1

    85065f090b1c16d65f2edf027c129823743195b0

  • SHA256

    2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83

  • SHA512

    23b05a6b289e47243c595aa31951c37e47818560091cef8d1bc8ba9246908d420e2adbdfe6c0926996b001ed3a7d1eeaec6840592230684e7d95879a38bbf5ac

  • SSDEEP

    12288:bDRU2DUFiTPS52Fas+mOVBOe/q0aSsbqtQmwp:X/UQHso0aSsqtop

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2305c4761d3bd0e07e980430573ae6fb74f1f9e28a629c59368714d60892df83.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a58c446f0599a6692bc96855a2aaaa46

    SHA1

    78961036540aa1283e6c5b74cf739b1ce722b91c

    SHA256

    a653a58a986b2ca6a24fd9594a4f8c2258f298d1d9be3db8da9e6c709632064e

    SHA512

    c179a2862005e39d0b3f3bb2f0214e13da03068b881cfd1b9f414b4a6b9911eb3506146cb320838b0da94957efee7711c37a26419a7ee14a17d8a86db9704ddb