Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 18:04

General

  • Target

    c687ed993c4652c28781f01ca067a033.pdf

  • Size

    94KB

  • MD5

    c687ed993c4652c28781f01ca067a033

  • SHA1

    068c52f40a7c29e40ba1900178840a16245d642d

  • SHA256

    0a17163013c0b5314587675fdb8abe8ed5a84397fc9556243a8017a9e0a5157e

  • SHA512

    cc19a9331811b5d2a53a8470dee30f5ba091ff60de0de3d92e7014cc218b0bfb9519ea7c97b4e60993b324a86b9ece5e6dd307045162efc2c7baf0cb0d6d4859

  • SSDEEP

    1536:5XGEEdJt6iZvhoE4NTgsuMMGwqAEXW2VS/JiSH12MmYA2WMhzYRBc2XWzgyW6pOY:BGEYr6N/NTT5MGwqbPS/gSV2M/A2Xhz9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c687ed993c4652c28781f01ca067a033.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          740d1309e0260aa54d9f0ee68f190159

          SHA1

          c93f2759de87b4f24cbd06bab2d2662e367994f7

          SHA256

          d714c6c8498700a5cb54e4ddcd6e54c4791420f794a855be5907cb92e4c57ae0

          SHA512

          12a55aa21c8a3ba286126969a7621ab1c74179a9904df19027c0c66aa6ba49195034aad5547485c83247d78daf2ce74f4416368817c3ba830a83d696fffa0157