Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 10:00

General

  • Target

    c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf

  • Size

    299KB

  • MD5

    fbde088b8816f24a9354c37b2f3ef815

  • SHA1

    25e9b1532cd62fe1b6fd46fc22d8cdeb9d6b03c8

  • SHA256

    c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f

  • SHA512

    605845f8c80ec4de5a1de5d618d8aacba2a741802d77975f0e8a860a8874c25c9af4ff80a985b8679829354f07b2c06616c4df7c76d0277f9092001d274482d2

  • SSDEEP

    6144:FYl2TnZnNhoubnpLEbQGy7Fi/31J8Njpc2eoCyrZa43XZAhy/3aP1:FYEnZnNhoubNcQG51EbeoCsA4HZYKqd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c76b071713ff91adca31870afb85c2779e1c87a62ff432edd51b8ed59a74384f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cfe0f6b92ae42853bfda2fc62eb3f06b

          SHA1

          092a2ee1d821a9e7cf5cd8059343042ad3217863

          SHA256

          15fbeb9bd78f5e59213c34b0c907ccbf7502b1bc831a4940195db0de03bfcf4c

          SHA512

          67a6d939cb2000d16889b5c5d03595335c1b1cf5e711f96390ecb2522ef8c6c363e0f6b42f949c646e2936a8da716d07ab486f53511467912f56b13203e00244