Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 18:46

General

  • Target

    c15671d913b416a88fd4f889082fa384.pdf

  • Size

    51KB

  • MD5

    c15671d913b416a88fd4f889082fa384

  • SHA1

    3cba4cc46934c91e7919c0c469f4640c20715a18

  • SHA256

    a99f4fd619f5d85b305b6c3307373ebb00c83a50aa3a2934cf1c1ce046737573

  • SHA512

    241750b008221411c64855cc778f4211bb0cbe9ade554c3f833193f6b53d433251b7cb8390eeeea43704706ed2b3bfe6b1fa1aff6d80966eda3045f16d5df532

  • SSDEEP

    768:5gGzpD5peB+KkKyztEHT2pC3VgSITwyL6mXgCQEDQ/r2AOjx2YfWpmJYZM:6GFtpJKuwWJQ56AOlVfWcJYZM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c15671d913b416a88fd4f889082fa384.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3b63865d54af16a826ec6b3960e82763

    SHA1

    1b630789c8d92e02e340f155c4140e302af6556b

    SHA256

    b5cb01b1929057d52686bdc3f37cce137b7b5a46e39ae350b18cd8a047bdfa7b

    SHA512

    bee5eff5882bf1337b0741fe9682aad026fa5594ca66e50325add23107e8b11fcfa9cbd97ced8b7650db3df2ac2daae5150db5f7597d2789b77d87f170a88a87