Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 21:38

General

  • Target

    c6ec0146b8f42fa6c9d54fa334df68bd.pdf

  • Size

    92KB

  • MD5

    c6ec0146b8f42fa6c9d54fa334df68bd

  • SHA1

    2368399e32f8dd0cf26a183382795b42b76a2ca6

  • SHA256

    03f645b2559f03be1519475b5d1cab8304860489cbee7a7214436bfd8e4c0bef

  • SHA512

    63d20f481373adb27e4ef8fb15c184084927e18478a7027ff0afa57fc200c1bc3f07b82c00b11eb52dea48a06a6aa3262326e5461bdcffbd570cf116af2036aa

  • SSDEEP

    1536:g15UuW0qVUxJUcYPXLRvx/o0oSpVjpSBECVhDlWkNpOPaWlVBu0A2ekLbn:wVW0q20dPXdvx/o8Vj01DuPdBusec

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c6ec0146b8f42fa6c9d54fa334df68bd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    78dc8f93681fd2ee6263bc2fb9a80c92

    SHA1

    d84170f4a6a8900632fe705e36f4a2e00994d98b

    SHA256

    ac2e894b2577e0cbe58a75e9ee5b178e0f04c0fad8d703cf1a4898e7fa87e4d2

    SHA512

    e13af9bb3b538a48d8cebe281ffa20861e1613dffe61c33ff73452e86f3c01041864ca04e9fae9eb1b5df30a92ed89502c56aa787a64f9dec3d3c99536cf5cf3