Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 08:22

General

  • Target

    c826da8e96052c86620da14359ade545.pdf

  • Size

    84KB

  • MD5

    c826da8e96052c86620da14359ade545

  • SHA1

    e4f71ecd7707ee5e2f410bd48613261b691cff3b

  • SHA256

    0b36b9d9a322355f81845678e111cb6f4d6263a30f0512294cf9c63d3360eff0

  • SHA512

    a1c8e3a6813da34d1fede9f12c8de60cf664b2d69e23266fdfc9df2d4c31164c7471035239445c8a8bf3ce6991a1d37a134608bf0ae5bc069f8df71a2767e6c5

  • SSDEEP

    1536:QBe9+X2zOwF/ezrD6L/8sbLCdpInAx+MHeCcwWrqh8vVxmsuGyWOpOwrHoDzPQeS:CemUFJ/dbLOyAx+MHlCVnwrHwzPm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c826da8e96052c86620da14359ade545.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a9296f7d006cbd14e8b600a24ce347ac

    SHA1

    cd449b9a195f1feb2310486a9f22f05c1b5e5080

    SHA256

    07afb692f27bfe7e2ff0edddc616c41f18aa9906d46a3689bbceabba42b0c885

    SHA512

    634e8a5e1f57eabe4dfeb3ed0c46fd3e3e85a66be316aa8ad68e918b9a3888dcce4c165f09b600fba8d37024779fd424fa2cfc44dfd0566704177da59b29e9cf