Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 10:25

General

  • Target

    c05a836f48589dc09b57dc9ffefb282f.pdf

  • Size

    110KB

  • MD5

    c05a836f48589dc09b57dc9ffefb282f

  • SHA1

    87f85ca659edf629e77dbde73fa6aa8610dea142

  • SHA256

    1a1ee9a0fcbc8e10886b99c0eecebe1ab85c634f9d07a3d3ffaba3cc42b00e51

  • SHA512

    8f8d7a0c3a3ce8e4a24ce9025155b5790ccbe0ed93b9262882d29fcc1dfe8acc0f6982ae9402e36772a52537bb644cd039913dd1619586b944ab0c05a8031aa2

  • SSDEEP

    1536:SCVffP9znIbmbtIT1dbDDRvWVK9OSKayioTE1Cl9DVYeEzWkGOSHMQRpNIWXpO/y:LfN6WtIT1dbDDRvWVWUw47VbEjStNA/y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c05a836f48589dc09b57dc9ffefb282f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e73a7e69b9a4d6eb835a1ce573daf851

          SHA1

          7e36016305a593806432143ff1d68019e7a59b27

          SHA256

          9a97ff20ba851ac7b962cb9776d7304dc6e7718606c5bbf7377452fe19253869

          SHA512

          9f7bcb61befa2a624aa76e9c420c849dcb1ed1d88d2404ef9359e992749b7e7fc11c4eea797007374913577374d6e25b6e4914f7dcaa70ae447d2a0f6bff61dc