Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 12:09

General

  • Target

    c35532ae6e939b7abc8d584e8bd7b3c9.pdf

  • Size

    83KB

  • MD5

    c35532ae6e939b7abc8d584e8bd7b3c9

  • SHA1

    7365c8a525326eca24a19f0508eded93d77ae07f

  • SHA256

    8dd1463776f7cec7a1173ae86d97fc52ed1f6835bc607b8fbc0895b9234691d3

  • SHA512

    1a08336161c0a87839a8c74cc95395cb5ff7a64721db80dae9d571ef1ee680d6d3408ea5f971b21614360463ae79d3a074c9966975c54a215233b259a968ac2c

  • SSDEEP

    1536:IiBAb5GP3T4b7hxDzlEfbJpPTUTf83bMeuyozUbSoJDOSzAKWOpOwrKWEcxsWJTa:M5GfTazSlpPTUr83bMeuyoQbSoJc/wry

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c35532ae6e939b7abc8d584e8bd7b3c9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          05e515a940e7384526230568f45fd106

          SHA1

          814c4d238a9bd17aad56a00d0ff8e34f977b40e9

          SHA256

          8de4f5d81931c922ce90017ed8f77443dd4b3a0f6b9b19af40d9b3f6ad98bfee

          SHA512

          8c2ba4bf03ab8581111195a1a2c0345cb21998f706a452780f97417187ebdb1ba8027d53bd3627fa5b4568b6a202db217de56085097cbfe588310b8680d655ee