Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 23:07

General

  • Target

    cc7cb80f676d71b85be87a467c6bddeb.pdf

  • Size

    85KB

  • MD5

    cc7cb80f676d71b85be87a467c6bddeb

  • SHA1

    85c50384cad79652de80127e752e159da65f80e8

  • SHA256

    e02b26afbfc8acdf1c498057fc386692116b2a6e3b966ed7ff0e35938aae39df

  • SHA512

    e73566e2755af2c42a532dec7cde1757af2c184dae19230b261ad16781adadf32eea7f6c79fee3536e38a88ee8154b780ca4e3721a26f52aa54b6138e012ba3d

  • SSDEEP

    1536:WB/rFDRzJ1y2H3ap2VpZxoQMKpwogXa8bHWypOlWWxY12LvHSWZqr8/QpzS+:cJ5JIO3ap2znFjw6dlDu2Lv/Zqrj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc7cb80f676d71b85be87a467c6bddeb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2f36b13378a0eb18c894154ec29958f5

          SHA1

          0825c6c614420b02c75749692c1fcd8a6affe0f8

          SHA256

          743bf02c59047c1be7cfcc8e1ad389c770d03af3e07362a41dd7bf56e912bbf9

          SHA512

          4e1f0c8c6a645f68756cf76dcba7781cbb4a6b34eec83870ec7a42924f13c5c1126012f2b50ad058cb8f9cf95379575cf3555ce05e81b14a00577722b8524c29