Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-03-2024 00:05

General

  • Target

    c9fa005cc01e2f535034b66230530a6e.pdf

  • Size

    34KB

  • MD5

    c9fa005cc01e2f535034b66230530a6e

  • SHA1

    f07a5711f0ea67355e7df7dd0c6ffd289b6ed957

  • SHA256

    c249070447777e1312d656c5d4fc3ba28388d4e6436a3ac88f270b431412a1f3

  • SHA512

    09b42251ce67fd050ab350464eaa9e12a457ad316152ed1388b9d5b39430ef4669eae9b18198c963c8e92903968e963e25150c265fca95d6e68f558435a82ec6

  • SSDEEP

    384:R1+qBpiGZVc9cKdkN8LaI8pszMWs1ZhRBFiSZ9bt9xhMkVcLXw9bhRZ0CUSREKUt:RVBI8Vc9zHEsz8rLbt9pc7B7RJ7cuO5A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c9fa005cc01e2f535034b66230530a6e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    deb5dddc500d36fcb380400e316e9ecd

    SHA1

    96562a007da467037e5d7c13184628b299cc984d

    SHA256

    f07189ce996a46f3e6616262b6033a43d04947a880c78fc530989bcfdb5a9eba

    SHA512

    839778dc37e8eabc6aef34d3dae4514218663f852492c332ec35184785c0f24eb6e97950b40ed6f1cd25a804b045c5b9612f5769f2962143ed2051f20f6a84c2