Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 08:36

General

  • Target

    c56e81d2a9bf8feefbb45b95a7f6d195.pdf

  • Size

    45KB

  • MD5

    c56e81d2a9bf8feefbb45b95a7f6d195

  • SHA1

    a335ce7b29592202d5683cf639589b3d8ba4d6ac

  • SHA256

    f0daac49f77b8994b55e27db57c29ed1c1b5bdfd7902bac590c7f47935acffd1

  • SHA512

    2e8e75080f5110e643935a640680cb4965be1b8021f7008456a687e6ed280cbae386f7210d37cd14a57580f559cf1d121d6826101f2b62a98459ce4e2ae0edd8

  • SSDEEP

    768:sTS5RN4ySRpWKMpezHylIrKIX964ZABIvJgHj41ntqK0oVSu/LF27X22gJq+RL:ESrAQvpez8fIX96DBIviDYAxoVpR9Jqa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c56e81d2a9bf8feefbb45b95a7f6d195.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93625b129f77c2b5608660ec10248e1c

    SHA1

    f6a5174a0e1e3c75f45062857b7aaf897ab39436

    SHA256

    b95ee32204f85f17e5bcd412209e16e631fa001c60642b796ecf47ec32f906e8

    SHA512

    af666c8e4f253fd1c00affd33397406039959172284d285911aa26e9533377f012f784d64e0897e9fddff881cf581a99748682468cd5190911a1da42a211b6d7