Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 15:00

General

  • Target

    c0e1cad235d6413be9a125880bc00c33.pdf

  • Size

    87KB

  • MD5

    c0e1cad235d6413be9a125880bc00c33

  • SHA1

    7afafe7022cc5dc766a75ebb0ba0b9c3dacb2658

  • SHA256

    360dc5a71ef91f850520b45bf0f81d20ec2fef29e6bd4cbd617289ec27a23728

  • SHA512

    701195e6a1974d0cab2b5384935d6f137eef800c4887aa3a49fc2e6c231588a15d6c8abba60a4435d4013ef1f9cc3cd9bad698b1d7379940bd5763c15818e89e

  • SSDEEP

    1536:YYqjamAhLWSVNkT4yF4Lh4Lce8+7l249P7rztWnPWq6Dloh3zWxApOGSueM92iF:AAdWGoFyh4we8MogP7ra+q++c3GSuNF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0e1cad235d6413be9a125880bc00c33.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a987b9e64a9d43707abb7dfccb9676ec

    SHA1

    d4622b7bd0db983d3d9546895750912c02f2e2d4

    SHA256

    86100e17d05d3216066a68481c5bb42b300ffeea3836f5c992f2ae1ee384c750

    SHA512

    1a68cc2d7a751f584c4e7953728c361fd3f31eb8ff264cd44a46f1de4249d18d08dc067d06661ea38dad71c5eeedd19a5876156220addc88c4f58a038ab7e958