Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 08:59

General

  • Target

    c03030ad8a62e5916de61bf6546beaf1.pdf

  • Size

    95KB

  • MD5

    c03030ad8a62e5916de61bf6546beaf1

  • SHA1

    0f59514d15b67773abbe84fe14a9cab128d4c73e

  • SHA256

    2a434f468d3d1a6fd2a0a9b466d316f99c084175d5869365f7aea9cde916ea65

  • SHA512

    211b38f70cfa94eccf75dd7ecdfada47eb551a3f61fd6f8a8ffebbd819a82d749af371c80d402f88caa57630a6bf54b6794f12a246daf65694af21a453dfbc2c

  • SSDEEP

    1536:rBaIcdVZ6Jsx/tyKTTJ4vLmZnqjCBt4oWOpOaZoJ2ttiF8+s8CWdrrKaKxi3g:NW6JusKTTdZLoaZ8QtiyQTrrKDd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c03030ad8a62e5916de61bf6546beaf1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93d92edc7a5da9ed7d563a7c985762cf

    SHA1

    5a6a0a32fa0b76d9dd458dad86d4fe695ee30897

    SHA256

    056ee66e0d12e5a4dafc990ae0db8bd9a873f802b4f0906140f89de3ceddbef8

    SHA512

    3fbd2220186a216e786d7e4a77e57c65a73dc27d9723c68f230c8159e973efb93d590bb2801214c0c2fe8d0efbdcc6c3938bb5d9bbb1b411b9f5ed17a7852514