Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2024 10:52

General

  • Target

    be6c6059f3d92eb5de615537963fb548.pdf

  • Size

    84KB

  • MD5

    be6c6059f3d92eb5de615537963fb548

  • SHA1

    9caa46f9136b1d6e6904a9e0b24ffff5220b4a39

  • SHA256

    a38a070128f0b92730413590392d6b123d7a90436621279d92ea6ae23de94294

  • SHA512

    1d1358f6443edac940955ad6aec0fccab8ec91e6172661f195fe082caf46f84739ca595f4b50135a783ea55dbc1acce32a1653bb1de1c0a951a73bd044bf8118

  • SSDEEP

    1536:VK2ODyclGbj+lEHz43wo1laNQ6VqTaWGpOKRl4vvWax+/8mS7RWUeqBoegJs:8PWpbj+Ikwo1NKq/Kj4vK/8mo7eU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be6c6059f3d92eb5de615537963fb548.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2dcc397ef2cf324ce9cf4fdb301e0b37

    SHA1

    08308d47ef88f097e3b9ca2508fdc42ab374ef9d

    SHA256

    65caa164b70fe73c965a7b90a99cd993d96cc5b4d3cd1235bd5ad9e0d0adc7b2

    SHA512

    4db829f13de0089739008f2f86953762452174432f4a3287903159acf791a2cdcbcd86ded8d026ac3400fb23b79eca50c911e8d158440a77050c0268f8bf3baa