Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 13:47

General

  • Target

    bbf59dec7ed81dfbd33d2f2301d3381f.pdf

  • Size

    84KB

  • MD5

    bbf59dec7ed81dfbd33d2f2301d3381f

  • SHA1

    5812b567a40e81dad0a41d8a2e1162c352bf75ea

  • SHA256

    0d7c712f7235297cb5d4dbeb41e9889e355374bf83d335d1f0efdab91ffe31a7

  • SHA512

    8a53c134cbc31211ad6ab8145d3842d2c14a2f7dc00842c994ad8849af177e658a628cc66d404d851798aa0e75b97257ebebbabad0ea7a7478e378276726692f

  • SSDEEP

    1536:lJQmTrLNyoxxSCK4/f9LGYWbWRHAoPX7Qa7ZrgGWP5JN6Jzr/rrWOpOaZ0ym:fQmT9ZxAG/f9LGPbWRHrvEkfcaZG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bbf59dec7ed81dfbd33d2f2301d3381f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    127a18fe43b6b46558e7a01603d0d5e1

    SHA1

    f1dadecf98d6c1463beaa8d20f1edf7952bf7703

    SHA256

    eb4afd137a51a519015422bc5e1863c1b317a2e53c064dd231162b517440d761

    SHA512

    f3ac026adbab14f9d65be23f96de2e6df786a0896664dd6ab8b2138e5ffd7b65257215bf6a507c1fe083155a146250bc16d8ebe8ac0b6f8a3bcb2954bff69807