Analysis

  • max time kernel
    131s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 03:02

General

  • Target

    c7846ff863eb77d735a6a1417d21aa55.pdf

  • Size

    72KB

  • MD5

    c7846ff863eb77d735a6a1417d21aa55

  • SHA1

    a89a6b9ea7cf8b1332a919e940a479e2cf0d7872

  • SHA256

    5a1322fcb0b8a80ddeb26b04c1cef0ec2b7e557a4d61462d7e87fda28014350d

  • SHA512

    fd54b46f2e0d9e00db743b7aeca208f445c88f05a7197f80bdfd6bd0a60467a7e5f53bd3383e8cfd477e496eb65d3b2f28edbec0302fa07a3b08e6001ba628c9

  • SSDEEP

    1536:W3fti71IGQaSXrIf3ED/CorkwKAh9oDVVXuWspO+TSUbUNSWO2Sd+W:giZbvurI8jCoKs9yVVXd+T8Qh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7846ff863eb77d735a6a1417d21aa55.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e2591f4c834f6088b8d92d894c5b8069

    SHA1

    6654256f33a83f59596ae0d9806408b4cf76d0c0

    SHA256

    b160b8da52cb2d3d5d9dcb5e319e75cdcfcd8919817e2a1902df1401eee6c503

    SHA512

    beb3d7329418fab1a53c70d7f78c7bbd6924cabfb1000e6f4050fd4234920500da2b55c2b95c80d51a3bae279b6094808c86ba1ec653b9b1166e75b2ea01ee95