Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 06:17

General

  • Target

    c2a82ac2b0c1a57ea306245a90f7a5e0.pdf

  • Size

    86KB

  • MD5

    c2a82ac2b0c1a57ea306245a90f7a5e0

  • SHA1

    15f28e8c005e60c1654e77089f00f133a2f3ca84

  • SHA256

    f8700b8cb798f181a96d01ed2c0194464995d1e91a7831d13c4bc5a7e22eb8a1

  • SHA512

    c4106ef46bbb48e514e0614eaf81276876b38e49bd680a8c010473fd65a88f74b2afdfca3a99077f5fe794a3f70678c4aa61cf986d119419dd561ea56b834b5f

  • SSDEEP

    1536:+hVxbCj7GXqu95dFUUK5T6We+9qVRUYhHtlk1DjeYWYpO2Wd8dWKNnS90E8Q90:57oquDoHT7e+Ih/6jg2G8E97g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c2a82ac2b0c1a57ea306245a90f7a5e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aef35ab43cfa9f9c8d80c2b7d23a0efa

          SHA1

          52733c274c5249a376cecbaad628cfc8c849b025

          SHA256

          bd4ace9e97314db4d8697d2e9a4e7c6c6147fea27dde91e6ad0470c7ff976005

          SHA512

          c42105c5d10f619a1ed98a29a20593d7758e2806948eaf9324957851de101fceea3b176714abf2e442c2e5a0ab1fe88fd132b64dd057887574382c611d617b7f