Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 18:05

General

  • Target

    c140f22fd0cb24dd16c0027ec8a18a03.pdf

  • Size

    86KB

  • MD5

    c140f22fd0cb24dd16c0027ec8a18a03

  • SHA1

    a93022e1361dd7252a897925feac471e7e23f87f

  • SHA256

    1e8ff38679aecedd6a41ccffd609b76c0951c2b776ebd2b34485d64d078d83d8

  • SHA512

    6618d75b252a1c58942be47b8ed8aea98d1eae899c9d90b15faa8f52466f32b8bb705f0dc4f1ecca00807304b04243fd37b3998cd41ff1ba090224e3524571c4

  • SSDEEP

    1536:SYvgIG4LoCTvmuev2aFV0UV9CtCOsFCWBOCfRBV9vRbra8WspOR4PY:hIIG40sOOi0UCsFzZBnJbraXRR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c140f22fd0cb24dd16c0027ec8a18a03.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    22454429d9ae914d0c8aa489cc748530

    SHA1

    10435f29e8ed480915e3d5263bcdb821bcb66c7a

    SHA256

    4614a0af0f65e590e16b61b042b5c206cad7a3c77ee9fd0b95801e43cd45f02d

    SHA512

    ab83aab7d33c3f715dbb6e3503791b40f1ee90aab05516161bcb1a5d10b8eb7fbea11a376a2cc243ece5995e8948a412f18d27511cee431ca6e6ac6318e4c79d