Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 16:56

General

  • Target

    c11e82811cda50cdf4b4c5b89e9c5b5c.pdf

  • Size

    71KB

  • MD5

    c11e82811cda50cdf4b4c5b89e9c5b5c

  • SHA1

    b1389902a31ac8ca9a057a4449bd2ab216add541

  • SHA256

    51f48f05acadd10a57ab265c8b913f6568b4d4a0af480aab3e5882f655a25172

  • SHA512

    ab4dbc791a0feef52bdaceb50e06bc283b26b68ef4c3e6cf2ea2013804f965f5f80b9e1e92aa9cc72aeeb3fca6a64eb2a7e2463acac3ab399e5f121d6f56aa38

  • SSDEEP

    1536:Op6NgopJ2Ep+D+rWhxt17NyHgpK1iiucKgoxSOQxdJD5c7deDp7:rrpJj+bfoV1jucidQxdTc7YDx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c11e82811cda50cdf4b4c5b89e9c5b5c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d05178da2939540213163e05257a3129

          SHA1

          139c198a6eca54c750f4ed8b9e307cd153d621c0

          SHA256

          29f4f1b15a61ef44227e0c6e6df8b6dfed2c41d22a5984e83cb6e14620d0c3d0

          SHA512

          31f8be47cb20bfcd9c885157cf4425f6862e5d42c7f747e0deb81fe4a5d50ae072fc200bd56f7287cfb8e3f0ff6ea88c4d7b09ba71c255644ee5949fbd5dfd58