Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 07:03

General

  • Target

    c2bfe52f0c755843cc643fe91f52b309.pdf

  • Size

    85KB

  • MD5

    c2bfe52f0c755843cc643fe91f52b309

  • SHA1

    17302d9476bea6dbbf64735ac946835e81ef291b

  • SHA256

    334ca7c44e68db8a66d4709aa5cf97c581553cb03441b38437c2e929c661c773

  • SHA512

    446868fed89e42d38d2ee3690f74e19e63940b20d6c5811e25ea4f59ae9c721becb78cbb5940f339b5cb420b2128f2dc89e643654415019b70554c09d75379a8

  • SSDEEP

    1536:VO+3+GxcAySCYu+0w9EA8Oh0jhhj+m+Xu8MYDPZsouaWgNXxVyTMv8f5UOp4WUpN:x+W/9E1HHafu8MYDZsmXTvDOpb7w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c2bfe52f0c755843cc643fe91f52b309.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3a5ddb1a9a1d7c80c6fd00815526d611

          SHA1

          000c2f5855709006564494f4c66e4c4616393318

          SHA256

          ebabe5d833ac3c7efacfbdd4df83abf1f31ba7e8b3d82773ba99dba173860b95

          SHA512

          8be978a17cb0964ab9d722c71c466af17aebbdfeffd9b8fe6ca3260389f011da1059101c4af8253b8003f5ab5e6b54c04e988ab6445a1daf7798d6501a70eb41