Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-03-2024 17:22

General

  • Target

    bc60d23160d348fb2cb0f2a54250a5ce.pdf

  • Size

    176KB

  • MD5

    bc60d23160d348fb2cb0f2a54250a5ce

  • SHA1

    378e212bcdc0dd0161e1f1d8f6e6fae7d9ba9bd8

  • SHA256

    19e9caa101a310e9d32b0148e772055535e39b3dc3f901a2118b11454f30cf91

  • SHA512

    20969ad3d7df4784156ef69bbff566c19699f91519da263be1101c57ecc878f6b2b0c6c2b304cbdaf72740f2de4f9f3ee54176b8f30e4ad4a94459d8044563dc

  • SSDEEP

    3072:svkBKNqfFtCxTTiMEppzh2OPYa0j9Jragv+XB+1kEv0w1GLnjzHC/LoPFR22SF/q:wMkqbKTGMEppzIOPY9T+XBpSGLnC/Lov

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc60d23160d348fb2cb0f2a54250a5ce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    64f68bebd0f242a91cde049b525ffd20

    SHA1

    3f60cd487f331128acf44f4c8a5283ba9d508236

    SHA256

    d2ae692a3fe79b98a85c3919243c4a909a419edadcbde198cf5bd116a6f469be

    SHA512

    6a4e42e5b07f7cf1a3d7fd85628256f6d7c25d83dbf949907d4cc4876e051a4e6b1661dbd86306cf52427d29ab92e6255ccd5214d00972c614d6e36de2fdd3c5