Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 13:27

General

  • Target

    c0b46a8c63a4999f02e72d2bc9a9b7b0.pdf

  • Size

    134KB

  • MD5

    c0b46a8c63a4999f02e72d2bc9a9b7b0

  • SHA1

    b8abd810b84536ccd1718732df366e0c17d965f0

  • SHA256

    c919bff9a5ea23246bf1a582d4f87db5bbfc3133aa6da3de06f8807585e679d6

  • SHA512

    ed3100624f2911bf99d7cafd723f2117bf9af2a72737a8050a86bbb0523316963310dc62d6620d79915d5289e87cd23201654da44c7715db1f30568d2e1cdd46

  • SSDEEP

    3072:3QnoOxr4d2ZmrKcLNgazewBGqP1jUvihn7yxP7gADHa6yK+Almyq+Ls/oW1:nOjMx3BGqdjUv6n7qZ+1ArbLs/J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0b46a8c63a4999f02e72d2bc9a9b7b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2b1f7eb4bff849638ecb0843b8b212e1

          SHA1

          257ce2becf4756e3e13c0ed0d2c7cad2c54c45e1

          SHA256

          1a61b3c58cbd02b26972f4949c79517d1204a6ca994d115b93adeba0c305ff97

          SHA512

          a2e4ac4dc9cc2b36d6fe12822fd17d1b26bb9071d48272f015b1ffb1ae0701862be5d53b9269bef7d1bc0c980b927b9eefece2b5e9c62a0faaf0c66f5f708854