Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 20:10

General

  • Target

    c17ddaefc73d33c57890687e498c0709.pdf

  • Size

    89KB

  • MD5

    c17ddaefc73d33c57890687e498c0709

  • SHA1

    e0ceffa9bb1d7b304d5f0d00250b9df77b55a2b9

  • SHA256

    19c20c5a62cf014a5adf5c0e830e11cb097e5c6e09e2cc685b28899966006429

  • SHA512

    613469bc4226e0249f28b18d44a1b26f97fe9a9323e57b52c5cecc7258f90918f1b68eefc0d10d4f4c8156b3fd89f39ea4b51ca9c8cf055ea223f676f872931f

  • SSDEEP

    1536:4P5r8gHY/bEFAmyOhzjLS3wAGzxLTZfsFSoHQG893TjWklxs5B/wMW8pO73QuP:Qe/b41LjAGNVfsVHQG893TDXs3/wf7BP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c17ddaefc73d33c57890687e498c0709.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1999e3435475ac67fdf3358fc7e8bd23

    SHA1

    39c27f126abe187bfe079732f9a67b6fddd7fb08

    SHA256

    08b70b92260dbcd316e242efa4c5ba27da3be06ade81028ba755cc4fea00438a

    SHA512

    f0eb3d95dfa2f0992d9b29d606ec40c2c803f46e95462d226a760f3c113148d91c715a1a14908efc442cd189baf9c7f2aba8647820a4b784971202834c51e9a1