Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 14:32

General

  • Target

    c61e37f81fc76efa39662706165b0b44.pdf

  • Size

    85KB

  • MD5

    c61e37f81fc76efa39662706165b0b44

  • SHA1

    4a3da4673748639eca224f311b30c2c8b2274dab

  • SHA256

    e7c9591ca7e2ac899a47adeabe831a1fcf305b1bf9b796a9dedc316ec01ded18

  • SHA512

    7a12046e76200373295040a7e2f09438300ebcbba6a661151128267473de4db9c533eeeb757e8c987334e213bfa60ae649fa28b99d8f753b6092c86979e002f6

  • SSDEEP

    1536:NElaJOTvB+X3rjkhBUFE1YZ3JpY6WclYT+R0V2CztpzWkNpOPrzV5HW2PY9GyCzM:vITInEOF3Z3PVWz6R0V2BPrzV5gGyC2P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c61e37f81fc76efa39662706165b0b44.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f93c807fe155934866e6237b185f8987

          SHA1

          8584b94fafa7240fbb45cbdbe629083f01f181df

          SHA256

          f69c45a5f174d19ba5b8780ba3202ac996f1aa2e4d5a962212e98360e30b135f

          SHA512

          8ed098313708c447bfb78036ae3639cb314473d4f487beae1ebe2f89f20875056945a17ba68117d0fc7b3821df5c2340c04dbe76e6acb760200e946d5d7fb254