Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-03-2024 05:58

General

  • Target

    c29e91c2f723a62684d17c8127d6aecf.pdf

  • Size

    87KB

  • MD5

    c29e91c2f723a62684d17c8127d6aecf

  • SHA1

    6d81e1f728ed95b5893ac02e72487bdaf8bc9af1

  • SHA256

    e6697c69d479c277e059b427f6adcef2e8d3ce32f35f9f2cb942eb1414d31868

  • SHA512

    ccb264647a1f53bf7682d45608a6b2a24ba915c41f15b75132b14cc15beba8484c683b186771c7c774c0fc326afe5afbc08ff1229d597a67e31381300b71cbc7

  • SSDEEP

    1536:Sj7AA0GhEouaHDAJrBcqkIrYLdAXrKtAfeERuSyQrkzpWxApOGzWp++c6v4StQB:Q7PdHNcJrcIWAXrKKJuSNgzu3G6nw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c29e91c2f723a62684d17c8127d6aecf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    52f6dafb462bd3b6d8a79e3315772a21

    SHA1

    3b2bbd4e6a81ece9e683ec2a3e79807a53258e40

    SHA256

    b7edb54e46f86e861128bdfa9fad9af03308e94f0cea5574f728ad16ee23b763

    SHA512

    1bb8957eddfe74488e53ff904eb3b118b97e40659626551cb549a66aea9d5379cb24e732be49da5f06cbbb947758c54d49db65839c9825f09d0867ba1d408374