Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 20:39

General

  • Target

    bcc0fc0bdd67a4b531c8c1e18c0eef8e.pdf

  • Size

    81KB

  • MD5

    bcc0fc0bdd67a4b531c8c1e18c0eef8e

  • SHA1

    c94dfd5f418c861c4dfd9f85fa605a5636ece84a

  • SHA256

    ab93e225dce1142d1ee32265cea64deda78e42eda7b0c7b3ce82ad4082b10893

  • SHA512

    e22f2537923e4879e227113909390798d32ee3d2757cc6f23ec9aa8dab1058f5874e02e494ad3fc2e8e00a3b9100b410addde789e834761ebc09c0f45c354730

  • SSDEEP

    1536:Qmkisei6CdJvrnBu2AanwonDugQ5+V64fPywkkWO2PGw7ycWsC8Bsj8o/aN117ep:dkr6OJvs2hFDu5+AwJQGw7aj8X1171R6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bcc0fc0bdd67a4b531c8c1e18c0eef8e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1804

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9e2f29bbdaee864be2f59839c46a21c5

          SHA1

          987f36295df4a46c9e44b6a50900766dda1ccade

          SHA256

          6bbdcbf7c5f36ff303b29e4c10963bd5989300962ee47b8aee73b5e389ca051e

          SHA512

          6916337979a52e15304342f06416448fe04ab5d447d8d0e00699740b3e76cfe114881bcea8f5192c55cb97ae079e44d8932429bbccf47b6d1b85070e88605493