Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 06:49

General

  • Target

    c53e48e62e2697a33c7c38073eda10b6.pdf

  • Size

    42KB

  • MD5

    c53e48e62e2697a33c7c38073eda10b6

  • SHA1

    d27b1da3e9617117753034a656f7f35b88119bc8

  • SHA256

    7f3b9c7da0f83997f3dd61f60024e9e95b025e697e726e0f68fd3688863286ac

  • SHA512

    b9443072e778d2a0101a9f24c6280c0d35bdf5b54d973687dd13a2352c1dd84f2fe98c69d8818754e940b811a9412074eac7eb63cbc9bb8c9d5b049be37d1e44

  • SSDEEP

    768:J8ZwNTu9YU+DnXFCj5Zq+jhB9FYt4WYoyJqDgIR7VYu8T0fp:J8Zmy9s14EEhB9JWYnJwg+muK0fp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c53e48e62e2697a33c7c38073eda10b6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9d247f6ab147053b3619ec12194a26ef

    SHA1

    d53e75c11661d041a6e1c99dc461fcdb99e186b5

    SHA256

    23f49e8ae56f58a68602c5fd2508b0b0dbce508db77e27219ed64881d0090c9b

    SHA512

    9cfa9b9f8432970af64e133ce1b63daa4ffaedb700a8f6de0fb09dce03a1fdeb05439fa967a95b30afcf25ba623ce64b601b57911c9982d5aa1c4c2caf98223d