Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 10:37

General

  • Target

    c86948df7e79f964dc4c95e610551b02.pdf

  • Size

    84KB

  • MD5

    c86948df7e79f964dc4c95e610551b02

  • SHA1

    536f2b9398ed59236f9744c0fff457a12bd7a2dd

  • SHA256

    6ccd00bcacb95c8da4aeba90103e0db18e598c000c5a326938edb96690901580

  • SHA512

    79a84777e9a8618c77087acc3fdc34b4d9a3075d491334392c08d7eebb0b81303cdb24dd151c32752f3f5cf479c514406bd41911119af1cf9a89340aa60373f2

  • SSDEEP

    1536:WFjXtwTvcvBYlEo2N+A4geEidXWst8JBnLWtshQur+5dfxZWbpONdAK:NMMsN2geEidXWsiJBdQugFxbN/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c86948df7e79f964dc4c95e610551b02.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d4861536243989f22f680e0fe4a1a18f

    SHA1

    7fbe31ad2b4765d9ecd2bfb9e9ff59b95ff68c37

    SHA256

    47d8d01d35b915254db46e7d2e671b698734e5c3704c4bfcd18c4330c6f55288

    SHA512

    0a8fdc25401acc49144916bc4127984c2626bd88219cdb48b632ee2d4fed0490d4f0cd432c294e27331c611a9952b065d9543d404686892d277018900158f2dd