Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 00:35

General

  • Target

    bf608be73b3a2ab34dafa13fcdeb96a7.pdf

  • Size

    93KB

  • MD5

    bf608be73b3a2ab34dafa13fcdeb96a7

  • SHA1

    ce47f7f5d3fc62f7838eef2c8076b0f111919258

  • SHA256

    a0759ba64267fe922b2c47b26c7d85cfb08ee1005a04039ed701d4731a076cc6

  • SHA512

    1a163b9d3703e320fb9fdb13687b7f2a1502654ed89ee34586822e2d41ee132fbed1bdca2b36e70de7c5b96e542d52f35428e11517f7914272a1bb789c5163e4

  • SSDEEP

    1536:QAL6O0i3aZpOdu1ZyVzIrTB7vym8XCW5VBYNZT2UrdNNPrNY/hANHrOoE/4dwXvR:VuOraGw1SMT8XCeBcZq4dN18hANL7xd2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf608be73b3a2ab34dafa13fcdeb96a7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7e59406f050997f796a01dad93d7bd28

          SHA1

          bb1c54c64c03cb342952c70b5a6994e7185ad996

          SHA256

          307b45d0a7762e072227f1106cc83c3c64651bc953ea2767bd831f26e3c89d01

          SHA512

          2783f99b41ffd80a40d9382451c7a8a04ff9fc2ebe36c94714e86ed2b7b6de34d03309832c28c18c44c20d9dc73ee50551c64ec2929320c6d1c77d9740a85d0f