Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 20:52

General

  • Target

    c1922ae45012d75c0e1eb1c7121f0e29.pdf

  • Size

    93KB

  • MD5

    c1922ae45012d75c0e1eb1c7121f0e29

  • SHA1

    41c305a4f9e80c8c743bbd2f6080224484862270

  • SHA256

    e0dac1639e168ccc40c61e7d15204badce829008bada538d6b618cb5853f7406

  • SHA512

    38b980a2f623fc6a592aa89c6d35e956a79d82aeed05f8caa1eadae38409047467f95b25670369ab800867bfd83d206b2e67821488985ecdc4ce0c5a84e8ef93

  • SSDEEP

    1536:E21mlWDiOKO4Nlxf/pwysEsLXd/zZv3QrW5mcIMnryGm69MZ6WO62MmtjPW8pO7Y:xy2ifxHpBad/zFArLcIMr669iEFMEjCM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1922ae45012d75c0e1eb1c7121f0e29.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a84692de60571c99c5f0770b95ef7dba

          SHA1

          4a3f20a4e7da4066245eb6f4a4f07aea208e4b62

          SHA256

          1efeb6ab306a4c8009b752f360836c096a9e5e66baf9062feb9e7f228a382057

          SHA512

          4dada340b7fac19996938dd5338c06a989e02bd5853cb553bd77516dad39a5b3a936bf143603cf9bac84f32fea0a17d45a410545abcee8b8d1fe4b1bf7894514