Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 00:10

General

  • Target

    bf53cd773af2d0db5e730ea37ba993cc.pdf

  • Size

    82KB

  • MD5

    bf53cd773af2d0db5e730ea37ba993cc

  • SHA1

    3ca8504d13d9f352d24d203d88736d8f9375eb79

  • SHA256

    69a847b409c5a47d1a96b254d5fc8431e454372fe1706d5073fff3b3affa2cd2

  • SHA512

    ac2dc51893139a78b3f4a486817e854655db872ed103ec31acd9fb907f717bc6faecc282382ed0cbac82eaf99d084df380b8c8f9bbcb85718996050dea328092

  • SSDEEP

    1536:cJZhGBwQZyesQnLwOUeVvqFxolIoSEWxzI4WapOtQHWPMVL9i14KGE2hok:SwBwQZRnnseVWccjx0htQyV14K52F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf53cd773af2d0db5e730ea37ba993cc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2732

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fafce30383776d75227495302e529d55

          SHA1

          e2c911054d6a87f2c6a9135a1276782c82483a33

          SHA256

          b67aa3aca2f0faeea27b085f36a6bc966bce1b6030d25cf0fd299ba260737390

          SHA512

          3d70bbd84db1996eb7478cfe0afa27bc8972eef135aa013990379cf8eb54d99ea7a643f557b2420444c476b13cd553816f40cde6f2ae105df483ade0213eb1d8