Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 12:11

General

  • Target

    be92bc2716e397a456397c0c8d2bd431.pdf

  • Size

    81KB

  • MD5

    be92bc2716e397a456397c0c8d2bd431

  • SHA1

    a333ac0e9ec2f1fdd0182d880a4f96e356a75c8d

  • SHA256

    fc0cf061a345052cda43e2b3e4130b6a6959a766547f0f77fd82d7987b01198d

  • SHA512

    e1cb41ee6b64093a7ae6089aa60c9ee74e3875b01fd20703e21a10f8b6ff754b57d59202ca1ceb4769d653bf78e9c5007d3c10f69f40981599f28941e3ff0c95

  • SSDEEP

    1536:cdnUH/judjQ3bRFn5Pw2fwFzzAQXJZAkUpMPzg535aN8dUL5RnYO9S+a+iuf:0SbudU9F5IjZXJZGMPq35T85hYD+tX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be92bc2716e397a456397c0c8d2bd431.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    62eb9d416ce1fdfd7d0152bde5820305

    SHA1

    2151949c8c510b8bf390dd13474c1847d4a0226f

    SHA256

    3305bd8a03b5a43bae58514cc3ac4fa466a904119d2603f6ab1d29e646ce7df7

    SHA512

    0a69d5291ccb3b1871f417f26c469b61d0e1157411b6e161bde93bef742d1630066ffc89960841e49b2fa1825af5ffa97fbc7ace08903de9cf9c9d5f7c5d8ae5