Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 14:52

General

  • Target

    c8e4a63102a48b9631f5dc1a1a212c68.pdf

  • Size

    45KB

  • MD5

    c8e4a63102a48b9631f5dc1a1a212c68

  • SHA1

    58ff3ca4af01362a028b0af7e8919190ae531b6a

  • SHA256

    0b43b6d7047d48a469dfe6433145d95cb7c5eef67e7334f56d84a9c4302d98c7

  • SHA512

    f5f2c198a2a685aa4728e55661af115ccf6216c9ef74d17cef49a2746079b6b6295e4c2a58287e9d54d3edf0783abfb9097b6a14422aeba357faef26b8ff2a0b

  • SSDEEP

    768:6QhhUEMB4SWGWDiUsxj3zqstjS43ZREepfqAOiGH6SwWuRdwII:6QhhUEuxO+S43ZR7pfqAOVPwWuRLI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8e4a63102a48b9631f5dc1a1a212c68.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cf60d63f8937019538e212fcb3f69e48

          SHA1

          914b89c043705d6463f2723104c9027c12991d5e

          SHA256

          6724d9afc15bcaef6381d2589b38bd465ac4406ddfc921b6025c24e291d061c4

          SHA512

          52f0744a175245add48df380991e2c77cd3f739a416ea93f0104c565cde62705d6050112dd804615e717e6a9cebbc33987cf7c23eff8b2f9869d8809ac482266