Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 12:45

General

  • Target

    c09ed7dd714a80925655706260abba0b.pdf

  • Size

    70KB

  • MD5

    c09ed7dd714a80925655706260abba0b

  • SHA1

    e24f999eb09a57398b744d93f0110065400e4184

  • SHA256

    b4e6e254e0be83d922c619e2f6c7bcc701cafe91f25cd8d97146302b3565df1c

  • SHA512

    db70b38d4fdf28dd416f7679a7d10127c72e29711b0c58f651e534d9c27e70606c54916a41e989447374b444e3a72697ab3936fec09040d5fcbd49370b3c13f9

  • SSDEEP

    1536:8y6VQiDQVb3QTwfOyF/B4rcc2ZepVJvNAfXZD0HxXicj31zgnuBG:v6yAcATw2yF/B4gc2Z+JvqPZD0RScjlI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c09ed7dd714a80925655706260abba0b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e4f1c67f5f11a0694dceb60b02b44b57

          SHA1

          4066d0da2029594e5706339655031d1512595fe2

          SHA256

          d7f55c4fe9d993610382830ffc4d1d7ba26d6b1ba3ea8257a045a3759d411ec6

          SHA512

          99803826d79107d46135093fc9ad73d373a170622d5607927bee4eeba3cb975653ee2e478e5a044412290d3dc572172c0952f3a3d8b61d7b837b7a60a59b1ae9