Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 16:18

General

  • Target

    bf0af78de1a1c7c4e667cfd52e6be45c.pdf

  • Size

    36KB

  • MD5

    bf0af78de1a1c7c4e667cfd52e6be45c

  • SHA1

    5a7be8fa3e6da979e56494b2e5b67eb9cef10c67

  • SHA256

    97be659e9405f9de2241e6a6ceb924a8b6d9a2755caa3da0e9629f00854fe397

  • SHA512

    1006834f8ddfd746212a653454767d6ac8c4a389027fefe41b81ab2f4eb83f8f8bd74b289de3e842fedec67d69b2e67d7c6fde86e074412cbaa2ba71e1e3e342

  • SSDEEP

    768:/t88+71zsVtVtALOdLkv1gX2QtoSaF8v2slcX42p6cpteC9PcimwXgwXO/vNB:/t88+71zQtVtinv1gX2goxF8vJhcuGkX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf0af78de1a1c7c4e667cfd52e6be45c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ff8c00d872c539c173a697743e125114

          SHA1

          0c3c84ecc40c9a733fc7210b480fdd12c7fd55f0

          SHA256

          d690955f0180c485fb1449edab1eda39cffd4c63558117cd0d8f9a1466839a44

          SHA512

          2e19171dd6fa5033b0ec26555c560e5b06ac51c992e823e44c899e0b17be5326cc07fb85116f0fff01fa35342c868688f76c154b1355da91ae330b9bb7f7949f