Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 09:07

General

  • Target

    c83c39916da65d05dcdbe8a99cd80518.pdf

  • Size

    88KB

  • MD5

    c83c39916da65d05dcdbe8a99cd80518

  • SHA1

    f8e7a8bc565a5801af6409e5cbc38f7f14afc8da

  • SHA256

    3daeb0b26c53fc4e25c826f2f729a1448ac188e4b4b2b3719e4ea5b42902f6bb

  • SHA512

    14455ee84915a2b86e20292a463d15eae32b8205ca6ba92e537fa3b242ccc5c0ff87e143b9f5567845f0f8c3f45705bd6642b26b99db09d8ac03df553275aa20

  • SSDEEP

    1536:NDGvqxOXTBlPR+LStywjI4QvM77RvsgGoPIYJyL7HZvjWD9nIawdKYXy1hlpWUpa:1VWBlpCSwmj177lsgrPIEynHJsIXoY06

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c83c39916da65d05dcdbe8a99cd80518.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3aa8d91cfcbeff0cd53f57447b1381c3

    SHA1

    1641e7cb1cf5bc988907b2dd17d0eae16fa65052

    SHA256

    f3c0d6a78c0580009b568e908150e25f04eb855bf3688724eb306841309e1e12

    SHA512

    269168a39bbea357295fce42a33c0a3b8aea52c8a41e7b8f5e35a09db219c140406b07b2f2c80a0c44993cf8702b1238f2e5fd2271484ac42e444afc57bedd31