Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 08:47

General

  • Target

    be2c13db1e8d523911e50e7758a3b58b.pdf

  • Size

    87KB

  • MD5

    be2c13db1e8d523911e50e7758a3b58b

  • SHA1

    cddd3a9d0694bb1c6b9bfa88b5749c367078051c

  • SHA256

    2a2b6a254a535b946b7128ca6974d15d262affe8bd11ca8bfaadd3ada50577e3

  • SHA512

    49b6ada4ac08e97a5f9ca6533c366f9828a3c4b7eeb2ee4a7e7e012d900d2ad5ef4659ad9d824b203b681a4d0d6cff5cc8615375f8695f46551bd23c87b730bb

  • SSDEEP

    1536:SzHBkXsa8CRrzJqr9CJxE263tObt8gWdNPxpLHIWZzW8pO+GJi:IHBkTVQ9C7O333p9Za+b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be2c13db1e8d523911e50e7758a3b58b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f0c2679f32e2100aea887d790d66276a

    SHA1

    1aad6783ce545a3372ddb587ddb61d1ff46f018f

    SHA256

    6258ed3059e51ee08a1b7c6806cb053fae098597116ce7ff7ef629c971a12188

    SHA512

    f07a85261bd9091572570cf986678c4230d7ebaffc86232a44fac2218f631ebb5f262346389c757d94be02dd2f61788449464849478dd67e652d591f685da216