Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 05:35

General

  • Target

    bdcb34e4e931fa812e037358ad9a9913.pdf

  • Size

    45KB

  • MD5

    bdcb34e4e931fa812e037358ad9a9913

  • SHA1

    85d2ae70d05f9667fa9c97732597967c22e96f4c

  • SHA256

    989aaa7c6a2d7f2e045b80feda342c1cd58fb13bed3f408ee3a1d8d8879ab6e0

  • SHA512

    2bf57c005fbb5999e2b5f7306239b94c439dec40481da32551ab7b5548655f87067d95cc39fbf5a9cd815a29b3624390a3a18455a2e91dae666d86aac455107e

  • SSDEEP

    768:EOTh8oZVP2dnD5Rpn4YCLPoScrFZM89VPqkmfw+VlS/hcR:EOTh8oLYCLwSEZ9VPnmfw+fSGR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bdcb34e4e931fa812e037358ad9a9913.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b421c92fcd3916913d923eb98654961c

          SHA1

          bb2028d152db3728ce4164e99f8bff48a75548cc

          SHA256

          29c7b452b766826189ee09c762fef14686b57c94d7ef0615fa07df8927ea4d72

          SHA512

          d5232b8be594cbe3db9d2f4a70e8ec14b04b1dcc40ddeac86a25fce7bdb18acd11b737063967e76231eead0a643da37027b3cc4f1cf68e07bf75bc15f9b522ad