Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 21:11

General

  • Target

    bcd0b7cbf7b9dbd16afc8664c8af6660.pdf

  • Size

    84KB

  • MD5

    bcd0b7cbf7b9dbd16afc8664c8af6660

  • SHA1

    867261cd2c5104a23e499f23955729c0292373b2

  • SHA256

    5ef4ec75ff04aed97d5b68bb8e651ba311864f8b036f47542a7829f39b9d0da5

  • SHA512

    2412736e249194942a262ff1a3f87053b3af2b61a9b4631a84e12064efaae907713adb37083d5e737cea60e6a290cddd6a3797d8244991f48c3d56864cb44287

  • SSDEEP

    1536:cc+r6Eb18wL2VYJ5CI9hPuy+P6SRwpX9LdmTVEAiZkpWxApOG2WCza/dadBWnNA0:6r36W2V2SRwbLdlAPu3GEedadiNAxqhj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bcd0b7cbf7b9dbd16afc8664c8af6660.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          25d78d832c4a22105904adea52c1eafe

          SHA1

          73269cc3b37ec8ff6b29384ee3561232b460b14f

          SHA256

          52aa148852e48bbad25ab7f70cf24055bccf9329ddcff4ea573ca86e3f53c916

          SHA512

          0f54a5d0b48d1fa872e1f02e22e79473794f83a76f8ede6b396d86779c31bf981226772abe339d7a7478ca118f4c912bc7636b82e5ed14d4751c270b10bedee4