Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 23:42

General

  • Target

    c1e7faa6dc79ec07b37f1ac08b85d984.pdf

  • Size

    84KB

  • MD5

    c1e7faa6dc79ec07b37f1ac08b85d984

  • SHA1

    085c9bb6c10e4e4f3dd326cfa28bea71738a4ab7

  • SHA256

    ca17d375f50e81bc910f42d69e3ed2fcf3bbffcb9c56037dfd7d2cdcd330995c

  • SHA512

    e6b7ebe8ea7e9d23b9fe587e4ff7ec430f8b8fa8dcb449a14a41017e64f70d5184804089c5cbc1916967825ef219c172442f3ff57444b4473a866c538033f387

  • SSDEEP

    1536:juINdYClPlszc3+XXLahWOrhiyIjOhnJoowNVgHWkNpOPQg7OoWkBK6WH0pVG:aq51mwunLahhFcOFJtXoPQg7O0BKN0i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1e7faa6dc79ec07b37f1ac08b85d984.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e92a9168ecac279726fa9b53c65df4de

    SHA1

    8bbeb13631d67ab362b8083296926bc8efcbb820

    SHA256

    22484422f9327238dee988b382651ba56463c6e1b66baa4c7f97579765b6d842

    SHA512

    4cebc55b79e3af761da378730af1a5360d370eda89b9ddee4cfef793379dc737cbe1fcfbef764b180f2c02c3eddd358fed15dca9aa829b2314852b2a180d5837