Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 18:31

General

  • Target

    c14ec62ffe36e48718da15e2afe6e343.pdf

  • Size

    83KB

  • MD5

    c14ec62ffe36e48718da15e2afe6e343

  • SHA1

    791f230db21a7525f81453580fa0a5d5e87620aa

  • SHA256

    bafd83205272db3168c5e1bf5b9ecb84614ec50338dd2bb8127b1112ed899aed

  • SHA512

    4a07ddc67edeef2622b40388c8834e2289cdb8feaa3ed35699f14c6aff1cf77656cd922fc7c7dd966bdb95f796ec7c6898776d73895540596eaca89582e324e9

  • SSDEEP

    1536:F7dI74qJj7TtjhDzjb4xvxij2tdB8VMZ72PCzsWg0yIzGpedO6WOpOwrHdgtG57:tdIfJj75jJow0dB8VMZ7SCzbyt4gvwrX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c14ec62ffe36e48718da15e2afe6e343.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2d57ef7bb893f79d3a6e4bdcbdb525ce

    SHA1

    737f43802d66cfc19d8a7172988a1873327ca59b

    SHA256

    bc61a4101949f6fb39681229f13d329378bd442bfdd8aa146c0e115b692ae48f

    SHA512

    29104b00868451509367d0f7546ac5dc51c9f86b2cc22dbd6947b6e07be9e6620cbcf4e0838b9b30b0298dbdbdad8411a660fd5f76c113b0701ca50c175a8764