Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 19:53

General

  • Target

    c97b5563a8ac69d9eb80d9ef22f2c45e.pdf

  • Size

    73KB

  • MD5

    c97b5563a8ac69d9eb80d9ef22f2c45e

  • SHA1

    f5c5ea56979d5fa03bfc17749e7e0c32aa48eb40

  • SHA256

    c747774e5f981f516cecd44dee9ac4690c27d035b63d4dd1437c029c721b61ef

  • SHA512

    5f16f93d73446815324f3b0822c9ce51d2ec6e4686224f43ef798ebd78855aa94720d5744a463870755bbf1355a2a59584924ae77096114da00b2ea7e6e6f649

  • SSDEEP

    1536:B16Jrvy4dZcdRvsvWBjLn8anrvxf8SBrTfSGlhv0WspOuGWrFQ0Ln5sMYuOZDhKn:6Jr6CE2e7xflBfvlhvPug0x0ZDhKn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c97b5563a8ac69d9eb80d9ef22f2c45e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7557591744eefa2324704e3f648bb83b

    SHA1

    14cdba86f278dca0b34d1f538a1bb1a53251d97e

    SHA256

    976b37236d5d16ce36dc42dbb121696aaa888377efe5ee8b9035d1d904c6435a

    SHA512

    7fd3c39a0a6ba4ab4c80b39033b7f4fe35dcb2547492fc7c510a8659db98503d5c4026633604ec66166f91124c453733f841c2e72ec5af5039a57d23a1518aea