Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 02:12

General

  • Target

    ca371b3262e703d2e9d4c387ec881b9a.pdf

  • Size

    47KB

  • MD5

    ca371b3262e703d2e9d4c387ec881b9a

  • SHA1

    2eed2c342f346b503b9e22704ad0242524f1bf03

  • SHA256

    da6f87286b1e4efe99f0481192b47d0f3aecc1c1512cc9cb6203752c796be20f

  • SHA512

    1200f0b3b95066aca206930329ff9e420b21d8cb10bf7780f6f0f0701ad0e8739907da8c04cd01c993a6814a15d0ba4e1f694e3bab8ad8b948d3ba6e8c47716d

  • SSDEEP

    768:RLooMFCcCUjvxCp+zJiqhvMhnAPbZQX/6q6bbK7Y5Io:9oDPvMkQOMhrX/6q68Yqo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ca371b3262e703d2e9d4c387ec881b9a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          71afbbd68ae64485fb88befbdb94a823

          SHA1

          07e436ee42b9a65ce51b1ff0a7fd75f7cd0c50a5

          SHA256

          20e0c027a7c051f9ed9f269f68316a54a9db4738610558bdec33acffec903e53

          SHA512

          ed79697f0936ae4fe849626312bd9519e47c83c5ed4ecb62ac788a65a722bfcd8d04b16f798e3ae1fabeb0eaaebb990690ccaba8e523c9909eb43d3668adfc89