Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 12:53

General

  • Target

    c0a2dcf6df175b144a6d7ea8e96028de.pdf

  • Size

    77KB

  • MD5

    c0a2dcf6df175b144a6d7ea8e96028de

  • SHA1

    410b0803c4e87db13c4b31b5fb2ca4b66bf222b2

  • SHA256

    33c4a18b815083efbc27a84510dfed877f27bd2f6c66c67b72508f0307479dcd

  • SHA512

    49b67b1679cfe21f474f8cbd5a7f1cac736dba8545602a4692ac2a8cdbf21f23e5167a11c5c46be22d007dd604d52c3cebc94b5ac533fb623c0785f000d58ec5

  • SSDEEP

    1536:nwe7sCLRvqrhRWz3fF9Lkzbaa/lbwDJytICBWkNpOPaW4fpsgVWZHohFLAeS93V:n7sORwu9Ie0l67P8igVWZwLg/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0a2dcf6df175b144a6d7ea8e96028de.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cb539bd02131186187923e5e04090b83

    SHA1

    e0551e41fecd542905adf5273fb515d6ab365f9a

    SHA256

    273bab6e6626daed82dc00ea0fbdd993f0b6fa7f4a6d1d1c7031d03609add0cc

    SHA512

    31770ac179894b2b03d914cdf14f6074b528ec248000396d3e83ae1a529c221389f3e493a2c795eb84424c278bd70ea445b34a64f1b0a33b434078970d33f09e