Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 23:16

General

  • Target

    cc80ea11e40749bb82dce19669b756d0.pdf

  • Size

    84KB

  • MD5

    cc80ea11e40749bb82dce19669b756d0

  • SHA1

    58a2a52c49ce075906232a057d2383a63096fb85

  • SHA256

    3144ed8909eca32a111c7726a4a145810ed682833a2cbc8540e93b6ab4feffd1

  • SHA512

    93b90138e7b75e6c83bcd55b3ed45ae0337da5039648f40e1fb0ecdf1806036d1bd89be755a219e04b8be970111e8303dce3b8563358c4dc8d466e1d68d2b260

  • SSDEEP

    1536:FM1eHKx2gAAhN5+848VtbMc3RE/CjPIc0EU/bbAFWHpOvmpPnrH2WecYr6955iaA:AqKx2g3Z4etbYqjIc0d/HAjvkPnrHcc+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc80ea11e40749bb82dce19669b756d0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5cf51c3d158034b7bb945f3c52f3291f

          SHA1

          99d8da2ec4a46a84df160e4f4cd2d9af6f7a75a2

          SHA256

          35af95e7cc072553b912c460525b89b8e4f1ebcf5498dffd46eefcc490943f1f

          SHA512

          bddb4837661771134fda0cf16443aa762e8d42d22f5a453b9cd11493b7f12522c1e7e1f75ea46d4284821d91260437c3abf9ae216324900089c3c70070946035