Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 01:31

General

  • Target

    c21ebf0cbc19ff2f2c98f5767db9d775.pdf

  • Size

    86KB

  • MD5

    c21ebf0cbc19ff2f2c98f5767db9d775

  • SHA1

    17daaab9cedca9a0a6261a5d681ef581c1ec9a24

  • SHA256

    46c228adf546fe4a18438f6ecb043671c33d525b47f629252bb2411454c9c855

  • SHA512

    1ea9368cef0e3f2725b4720883e1c7284b7b2849ab89efa5c41d461f7f84483b6f2a8f02b0d2a4f59f47f5c09f084c7e93fa4c143473b326f51a51628b704dd4

  • SSDEEP

    1536:kp0FzDrkNKJ4nwlACZmGmRXKkHKNHvEa7KzVsWit/BCWWapOtQXkmkMVcJdK:vFANnntCwDIkHKNPEax/BCrtQXkFMVcm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c21ebf0cbc19ff2f2c98f5767db9d775.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e491f5e790112ee16be160409d50d548

          SHA1

          463dc1cb676ab0061c6f4e740a839a901d3ddcc5

          SHA256

          5202e6eb33dbe06d30aa01d5565c3893b642918f43e9381da2d66e70e2f99697

          SHA512

          7d9de10bb21bebe3f66d53fa8cc16c3de0cf14d1d0428d87e77215af56ae7c9e723cdbc4643f507ae2f68e313d3bed2f2fa11c7b3e5888a5d90bc6445de92e93