Analysis

  • max time kernel
    119s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-03-2024 16:06

General

  • Target

    bbae1946e903a13d9edeef87b25e5ef6.pdf

  • Size

    81KB

  • MD5

    bbae1946e903a13d9edeef87b25e5ef6

  • SHA1

    e28d6f3519f6d52c865f5be314c8ad311a12a8a7

  • SHA256

    042786fd011346ce8c05f3249dfe9a57513fa19d464b9c7bc424cb21b9531f82

  • SHA512

    9c238ed31086fc649e4d55166a968364eb9183057c60c3964752288bb4fc034646c4ff2be90d2606678c8344c86a10e7933be6ab97807db2014e5d6a0d9fb8ec

  • SSDEEP

    1536:RIRTNgFpuMRF+qB6sK52S/29E8YBvClVowfrvW7YKWQeDhJbBcgW8pOGiPtVCaWZ:g1mFDkj52Y29EFBKlGwS7Yyed3cbGiPm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bbae1946e903a13d9edeef87b25e5ef6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    840952266f2e905ac589036ecf0a5a28

    SHA1

    9f5b1fc9755433ebf15a06e3cb756ff545a7f087

    SHA256

    34631cdbd11f0f792100f633b80071d4a861497c3f560fa50e27a46744170142

    SHA512

    8c25753fa04b8d8d7a90c0804ab5f9a171b50ab92d8825e7eda871f07c080563f7cf7e1e288de66449bf657a0942fbc7dc2a4ac24255e6a56f2b5c62987db4c3