Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 17:11

General

  • Target

    bc5b508aee48387037a9581faaf81676.pdf

  • Size

    87KB

  • MD5

    bc5b508aee48387037a9581faaf81676

  • SHA1

    2f95038c8d9118f08885bcbc28d0302772a3553a

  • SHA256

    6901c4b6122956627ee9df8f26ecc4031bb2aa1d9b3c93642c2b41dd900fc330

  • SHA512

    d0fe6a9355305f5529689ce7f3726a586878bef1daa0dd96fb7c7d5071980c373e4d3c0c1516395ed17389496b7a719b229855b4fa0234246544a4ca65202eb6

  • SSDEEP

    1536:TKCkPpRsw43gHEB2/X9XzmoLXvKyf5yCH74Inu6tWu3zm5MFAWapOtQEraBRepy:mFBC3gkBMnL/KyH4I7Z3LF5tQss9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc5b508aee48387037a9581faaf81676.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f1697cfce1854c68913f18eb44d69e69

          SHA1

          ed80a2701ab0e804d294220d8b0244fbd80b2837

          SHA256

          eb7d9b9b1c9b2ef3475e4b394415945586ff15b433d100cf661e43e246f717b6

          SHA512

          43da854477baa0366af7afff718d5adcf58c3fe4c825754a8083375b04f9bd35edf283ea73d133643911cb651c20786afbaad09f2b82ee3cc4b70fb40ce66d4f