Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2024 13:27

General

  • Target

    beb86deaacd07979234392b3b9a453d2.pdf

  • Size

    93KB

  • MD5

    beb86deaacd07979234392b3b9a453d2

  • SHA1

    cd11ebc1c0594e90298102ab3589851856547c0b

  • SHA256

    d2b7d051072447ba1ac87c7da642ad8838ca9a946047f870ec72b21e4257b061

  • SHA512

    e3c162fe1009280ebff85060e7f4c84bb18da298a4dd8eabe8ba7449993f0f8d2a6865d88266b06aebc33342b7658140dc8ed1f01386d1d814156ee2b950262a

  • SSDEEP

    1536:Qdw7uhgPrZZf8+WftGQn7ATqw3yVJms8yUOICEXMzMKWypOlL7mjVWE8l45LSYgk:6KhZxWfjn72qw3qJz8gIzMQlLCjl24gY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\beb86deaacd07979234392b3b9a453d2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    91700f5cd3c6dc95d8b1d45cd8956bc6

    SHA1

    766ab2ba94c1a58c8883342f137f71a9b8336323

    SHA256

    63084ba9299e7ad896a5d65cd22cf68f1dd66f67de5a072b1a380b5a3366da65

    SHA512

    1740387f361c32771042291aefcb9bc5eeb62521e8172930457d56d50e6c3bf9ae5d2196a2f99ae852e4d9e6a3bf7caccdd7f88993cde7c091da99428c38e4bb