Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-03-2024 14:30

General

  • Target

    bb7fa669fb0cf1a6c7032c4482924f6b.pdf

  • Size

    85KB

  • MD5

    bb7fa669fb0cf1a6c7032c4482924f6b

  • SHA1

    27647e3d8e91dd7f0c0f3a212a4447b634f39db9

  • SHA256

    afa8cd432a3daa9fa50b2abbd786fa162286ea1d801482c3ee5804e3deb142af

  • SHA512

    1a54b3a733bcf8b528084f4b4369c06f7a4f33a82ea8572259cff63265060011c31dec99a65dcfd89f34647d3ddcef1cc4b75889190f460bd9ffbd7efcdb6534

  • SSDEEP

    1536:QHZXUI6n72oIBIxiTC83OPhhelfBqO08kkN8ep4GdW8pOGEW+tObghLgcqe:0dUDnZIBImC83khheRBz08TN8eeVGase

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bb7fa669fb0cf1a6c7032c4482924f6b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f9486b0008983a4a43e655ad4e1f1228

    SHA1

    626dd199628d1a27222828884e9790b82aa8f5ad

    SHA256

    b0ed028b645df74a4524aed53f11b99c8381eeedb54359d95ca27e4673df1e3d

    SHA512

    e7ca55f066b46a18e5bf8d69633868a8cd3e66084b2b12dab66322a13bc181d4c55a67171c4de1a345b3afb72aacc52af39c1e0016e81cc3c39aef1bcf450f26