Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 19:42

General

  • Target

    Matematica 1/UNIDAD 2/Vasquez-Cristofer-Expresiones polinomicas.pdf

  • Size

    377KB

  • MD5

    9e6a23c1aa50e194933cc153733fa005

  • SHA1

    c7b111bf59a43905b02cb9a77662928e2f5050a8

  • SHA256

    13222d9681fcd604d9e4dcace8fa16914cf7792e1d4c60af3870cfa1a8be49a9

  • SHA512

    980135e2c5e890fcfe0ce3608968d46f9a3b8b16a8058b0113acca0713827385242cd37475c895c06a32b6faadf89d27b21f9b7b8b2de7a48c54f7c4a8a39a9e

  • SSDEEP

    6144:4dnR0r1q9Nv9BsZ96J9SCczzpVWF+aQ9ypyBrMILw/c8W7y4oQw44AuAIvL2Jmi:4d+raNvL2BC2zDWQaQ9ypyFMILwEb7yY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Matematica 1\UNIDAD 2\Vasquez-Cristofer-Expresiones polinomicas.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6688d7db114ba1c8d6eee4fd1781775d

    SHA1

    197ec6fa53694db447a2f3032f41e5c3417ac4ee

    SHA256

    8cb880f254e93519afabb5d94c6e2ed2df84b108a19f22a0b3630cb9a049736e

    SHA512

    5b03b21210dbfc7f76a2e071b45aaaaf12f544129c2c5173ceecce9a938f6194ff639580af2d4976055745cf9f5f654b4d16e8f36bf85ad06e93823f9889de36