Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 06:03

General

  • Target

    c52914e3170bcdcde44108f98f02dd36.pdf

  • Size

    98KB

  • MD5

    c52914e3170bcdcde44108f98f02dd36

  • SHA1

    ee50b1d32b524e54df1d5f220f4ac91df625e522

  • SHA256

    c043e6501856fdbfd2fe053e31b808afd90e79b059a2c04143b54e7ac7691bcc

  • SHA512

    45f28283f9911c903b7165cd1c98aed835e84932830259ea7c69a25ea77ed8038a65f9349ab7d492e2d90405ca5de0c527e24d01460eec5c8f53b0ba3b2c3393

  • SSDEEP

    1536:iZ+VKBKsX+s/USo/jxzJXUUz52qxBzQYO9E4JYDGWDaVwlxWUpO7tDP:mN9OtVzDQYO9n6Naql071

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c52914e3170bcdcde44108f98f02dd36.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    59f253950b9f105b4c35264f956183e9

    SHA1

    e6766c86467fdffecef7bf99803f0e7acdcb5732

    SHA256

    1cd2c80ddf7d5c3e3b3deda231ffc31002c8d684ebb2eff09acfaa4f479b72f8

    SHA512

    f7d45f712bc2da8ac0f433d6804dcca5f5dbf8a1f63aad33ca560983980a505d6ebe8ad2e365277a1ecc75bad2b48798814c061161df9f011e2f287148149ece