Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 13:22

General

  • Target

    c5fa5b6d7ad6a4e6ca4f33b64b0cfcb3.pdf

  • Size

    92KB

  • MD5

    c5fa5b6d7ad6a4e6ca4f33b64b0cfcb3

  • SHA1

    c8136823ab3936e1716d7dcc7779c435eba628ed

  • SHA256

    16eb9259353364724e5106d4935f18b27b3be751630a6a5fc5d9083f39aedb3c

  • SHA512

    4fcdb80851bb890dc6ab0a6dee762968ea57e7d1453324622b74ae55c9419f1e4614333d3784e5d1e43976a711dd6c9cb57c510aaa83b78dddb171aa845efce2

  • SSDEEP

    1536:J7DJV0qw462UkeH8wtiMI79SOq4fnBJ6rrTQ3O2TMYFp/Txqv0mPWGpOKCWk3Yr+:Vzckaav7J5yrrE3HQc/TxdVKvipq/x4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5fa5b6d7ad6a4e6ca4f33b64b0cfcb3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ed46894a4c07fbf95f6c07d97caca138

          SHA1

          c90476c58232f369f4fcaed180d4b01131702cb6

          SHA256

          e6e15f3843c909d192783d8902e83bed8da8d7a73b295f5b7a7607e43a0b67a5

          SHA512

          4010565c68deb8f7fadf2289227cee834ad4754e1661d2cec8a539fabc5df05157fa592fed99234bd0b26e186b7f9eec9ad23eb07b5b1358fd2721efc1a56212