Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 05:52

General

  • Target

    c001c1a5bd972e6c1939d042b37ee505.pdf

  • Size

    76KB

  • MD5

    c001c1a5bd972e6c1939d042b37ee505

  • SHA1

    8b833f21f354fc061e336e56f3bc1b27278db519

  • SHA256

    5a06c1ccfd33346087a5a1a8c109b24f03bc0d9e7a3c1fabb21cf20428cc6302

  • SHA512

    8e97a997387002035ddbae35f9c4e3cccdc85a4bbb6caa080ee4a49811075ad5a048a1e614ec9de7656ea60ff53ec64c1f4a5e48aaec8c94777b4aaa5b8a1ea5

  • SSDEEP

    1536:G9CvVAhgQ9fIF8JoADdqLqavuvKEIDFL7WGpOKCWg5jC+4xAVazO5Owh2f:SuVMggfIaJvDMUKlD2Kmh3Vktw8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c001c1a5bd972e6c1939d042b37ee505.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e4e39e40fdbf259bc178461609099b33

          SHA1

          dc669ac1989bfb7ccb7e78a58dcf91b95cc1bccb

          SHA256

          69d70f6dd5b23fc70331acc4f61d00868b93f42d56de574e4929ff6a517d5e9a

          SHA512

          43ef16dbaf2352786858a138aba002aef1642e780c9da1910d51b9db56f406ff319512e0a280e4c986c4e5296806f67b9d1b9be64f9b832b0bb4001ea2819dd7