Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-03-2024 23:05

General

  • Target

    cc7bd1fcced53f5c24d5b12ccc48cdff.pdf

  • Size

    77KB

  • MD5

    cc7bd1fcced53f5c24d5b12ccc48cdff

  • SHA1

    715f9be416ebf252f051252a66de6c6317627fd1

  • SHA256

    b1091df9aeb602f7b35dce1813f2be8d3c060247a6741bdf9143cae640f4bdd0

  • SHA512

    9ab2e01ae101199d46c1b8c9a418d7d21e56e0991efd921d5c773f9d7c71a4b47e15ebc0367ca2867cbe511118fb028c2df241238b075eca2c2c8ebaebd4cd2d

  • SSDEEP

    1536:GpdhdEKs7v1F+TW/uWqO1cn/E6ltsyWy/QNiVCdu1I63IDUxcqLWQpOCa6F4v:WdhdE1pus1wMKVM63sU+q2C+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc7bd1fcced53f5c24d5b12ccc48cdff.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5c597e9d0a44aa1fb54b9dcf7346d400

    SHA1

    96e985fb491a9c501a4bfa2da4b080b848273a67

    SHA256

    04881751927ab08682979a299cb1d3fbd0f33a6962a6a4ecb802ada0231556e8

    SHA512

    2f9454a6f103f2d10a0a9c1199814094889540e354b52642c87bded1ba554c5185a62b29ed1189c426180d6a93def8f245f11853fc1f6abca51711c2acd51299