Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 07:41

General

  • Target

    c556a3413d36f82f2783fda3e8dd3169.pdf

  • Size

    82KB

  • MD5

    c556a3413d36f82f2783fda3e8dd3169

  • SHA1

    2e32cb0f43e8eaded6781bda644880b325aa99af

  • SHA256

    f436d9982fa464312947f23eb3e78e360386b37efe70ee6a2b06063fb5acbd01

  • SHA512

    62cef19e52bd5fb405d833b578478b85eee91ad03a4416ccf0b1ab83de8aa1ef25a43b164a40bb3256c0bb7c6fb9edde78f1bfc090fbe1d59b057b6362aa608a

  • SSDEEP

    1536:qSWD1UkvFxtXozt8dVJfrTj8PXiIjpWUiIzzaXXxn0nDG7WmlWUpO7Qon:Vo/v5Qt8/hsviI3zzwxn0sWZ7/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c556a3413d36f82f2783fda3e8dd3169.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    19733095462deaddde50e2e6dd04b86c

    SHA1

    9d7f19e98158a59af65b2727a6d7539450d9589d

    SHA256

    825596421fb50b40721febfc501473c95e4eb3a816f8670cf0e18c785ad21805

    SHA512

    dbb727d03a569eed200da903d0089a3748e2ede65bb3f094b84d35661400149b5be85d27e3dde98fd88f7faa4b382579aa476aa80a9afca93ebc1830a9394a0e