Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 04:49

General

  • Target

    c50392f45f14e26e2f67594ebd77ec1d.pdf

  • Size

    89KB

  • MD5

    c50392f45f14e26e2f67594ebd77ec1d

  • SHA1

    bc74e71c60d7cc5850bcf43e3c605edceede0210

  • SHA256

    85bbb9eb97515e5fc4b1bae17626c10a879e1565a084c923fd4af51edd1d48af

  • SHA512

    dfc007ea510e1be59ab0fd523ae7ceb029cfa0ca09d03f131c86908b7719a23aebab7c44031c68b964e88eb9fcfb3828f8cfa5fee7cd4ed139a6f4e7fd57223f

  • SSDEEP

    1536:WsqWMQd+lkAVrzgS04pU82smdBFyoYkwZe4SWducyhxbO9VmlWCFac5hxrcWQpOW:nMda5sytFseHLcyhxbOiJDxrbCz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c50392f45f14e26e2f67594ebd77ec1d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4f48682f229193d6f02cef801f855aa5

    SHA1

    d5a26a28e6520e097dc52306989029cacedd1388

    SHA256

    255f35c8f571525a50b52973cb8c8f267db638d6e7c50bfa59f6a6c0f05832df

    SHA512

    3ddc851541259527f9adf466afbb123d388bde5992e1bf6f2590295331cfe2198578317b2d2d439c520a6539e972906d98ecc90b6aba2587ec780cc6cbdb2dc6