Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 06:31

General

  • Target

    bde9193b0c9b3e2f98bbc2e62d1ecaa0.pdf

  • Size

    84KB

  • MD5

    bde9193b0c9b3e2f98bbc2e62d1ecaa0

  • SHA1

    d0d55d1cfede157b7556b60ae9ca902d2d3adc93

  • SHA256

    47b3f482ae935ebb9ff627939213a5733ab00f9fa59dc5a26987c34d0ba16720

  • SHA512

    80102ecbcc28bf5b1d3eb243d3eed423a273be612bb7e9f2c9b5162c022154a7b64abf8dee1072385ddbc870f9e6e37cb763ccb50baecaea245776c80d4ea38b

  • SSDEEP

    1536:xEjVEJEAl0FagsTnTtZPlrQhxA2ARW3JFGJBM17WM308jyohzJWUpO7vev:+VEJcUgsTnTLixmRsFGBM/Fjy+zs7+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bde9193b0c9b3e2f98bbc2e62d1ecaa0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0806a742bff5d10ce093af310a8d16aa

          SHA1

          e5f16a92d1fec7b9867a6983013d7ce8bab263e8

          SHA256

          f8738852fdeb2847f70c8fd1e529969ffb0b65c74266a2dabd9dc381b120b123

          SHA512

          fddbe4ac2a8f35b18f23e8043d1d5487bcea409c597de14f715f2f36b8384984cd2164a76a37206c8f16094b87bbe23af1fbfc5d60374473057699a867cad181