Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 23:43

General

  • Target

    c1e8aca1458378e0a066bfc6e6d2f353.pdf

  • Size

    45KB

  • MD5

    c1e8aca1458378e0a066bfc6e6d2f353

  • SHA1

    37a93e3b9386440db4c3407d9cdac1c3136a7be2

  • SHA256

    e9e34c1456714ee240e84e12e412f46c9702923bd0cb6c3620838a01f8a49630

  • SHA512

    3aab4f01966c1fe9b397f797695c88af7ff31f11f00e1a07f102ca2e501e2deadff4edbf1278c92d2d6637a11935445fefebac36a0b6cfa073e2e7e355c7add8

  • SSDEEP

    768:x7nXgtFljhr0u+uT9hqzq3Sx9JFw2K+vQ3pLBlupKjfFa:mthRD33CPWyI3pLrjfFa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1e8aca1458378e0a066bfc6e6d2f353.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          40ab420df0e694651d39d439915b8dbf

          SHA1

          2fe47f93202fa1491f4c3f78ca87140d1f9f5310

          SHA256

          2a767a4bf9d46b022d4f01972b4f046f39c81da26fdb2d3f7507ee612f989511

          SHA512

          83156a65661232313ba7c4ec26a699d7b195ae091f6aabe30797655f79b42ba9a754eecaf1eb11ab1de4c0191506345471cb6e3caafcb50a0467e6dc8b4190a4