Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 08:32

General

  • Target

    be245f9a8ac6f4a5527f704bfe93eba2.pdf

  • Size

    90KB

  • MD5

    be245f9a8ac6f4a5527f704bfe93eba2

  • SHA1

    4a53b911d99715ad82c302eb88f4ca3190917a6b

  • SHA256

    a0261d208239b47178c92bad9c1b4301751a384423e7767c27feb0062b41e9cd

  • SHA512

    ae3d7f47fbb8a9b92a5852c5c3c5c980ba4d1c6e429d38ad9b55c3022add710bb96928051dc8bff71c1ccc1d647887671c45d939d7771987dc82f389485bc7ed

  • SSDEEP

    1536:FCuC2X3LZUpkNyC9QScJbfyIHxwr1CGz6OLXX9AyLaTWWoHyZ7OW6pOu2lVl8p4z:PvSpkNytTJbjwB7PXX9AyLaT6S9Lu2lJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be245f9a8ac6f4a5527f704bfe93eba2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dd4311b189de1bff980a680e6f02a2d1

    SHA1

    86f3b6e3a40e6888a62d47a4745690431a00a7ae

    SHA256

    05084490d0d3c3a501b4294286edbc5981935d5a002b51ae0b390017be9f9223

    SHA512

    d100bcd88ee2d9e51bbfbbb44875d9032da51314de764d1025e5749f4509b00a253e493707ee8e048f6d27e1c9375983a933ff4426cff97d56191c383776b5ff