Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 17:20

General

  • Target

    c129c7118842f920d6cc1ccd88bf5e1f.pdf

  • Size

    356KB

  • MD5

    c129c7118842f920d6cc1ccd88bf5e1f

  • SHA1

    7a776e7608eaf6d53ca8887fd844fce78776d1c6

  • SHA256

    b66995b1eb425f5d4ae01a4815e9c7f2d5093977150ea4c41d4a127fcd3faa11

  • SHA512

    8c6bc6578273f92d042e1ca4d412b2e6be1fdd68a727141961faad30f8ba56a6dcb6edcaf2374d051af227a860038ccefef99dd529ac08ed38273781bc7113fc

  • SSDEEP

    6144:hBk2zzeeh/Awgi/+faLnyLyci7XHt7syyI8XV2mRFXQy6fy5LSONKxcOSZ1DD3:hy2zzxYBfaLyY7LwXt56DOUxiZ1f3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c129c7118842f920d6cc1ccd88bf5e1f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4707768f730be8de5326089d3ce4f0a8

          SHA1

          00eb4453759809bfdbe6efdf9a79fd2b4c9e14f3

          SHA256

          6daec8f1af3b0b273436e005fb4a8b9c0db1bca0769c3819c8b248d5695b05cc

          SHA512

          537f469f2d386e922e5bf48a21d50e46cad0acba7f3085097766285c700f3ee15c8b8514ffd7d946aee6b09fdad5b34c54fe7dc24bd11bbdc46f46853a56ca17