Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 03:42

General

  • Target

    Stamps/NOT FOR PUBLIC RELEASE.pdf

  • Size

    6KB

  • MD5

    133b0602f75db9c17f9eb1ce9af32ca3

  • SHA1

    ae49e3382f0972e049df9834f8caa897bcf8f87e

  • SHA256

    56368459e3fe15a6f1dedeec7a782ba113e5f7a446add4e3f2899838f2fd9f1d

  • SHA512

    c50ed5983027029892e612e785a05345829d8207559837792edb8dcbef77123a5adaf1385f09c2dc56fc4028da95c7c94935c66ec049b137186250057c6862ca

  • SSDEEP

    96:l/1ib8DgubpMHMZ9oa3s1J9rbobVToW/84pW/IFAQuY1ec5i866KZf/fYY2zDAQT:mbGpIMZFsFrbobR8wW/HkpigKdg0+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Stamps\NOT FOR PUBLIC RELEASE.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1ae0a5d07f839a2cb2c7e22933a3d3c2

    SHA1

    45f74b371dfb834063a91bc6dcec5304760bb42a

    SHA256

    9d4bfe9908f17652225bbe7343c5bd00da3b62b6f8242eb4bc0449ad52c3da81

    SHA512

    f645446ad29332bb052f671f58714dfbc869e0d0c4fe6c05aab82625db440770529d39d168a576bd9420bd34ba5835b453ed4282a590d71bcb6e63a126519ebf