Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-03-2024 03:07

General

  • Target

    ca5353a0e6e0b09fd4f76b385ce9992b.pdf

  • Size

    84KB

  • MD5

    ca5353a0e6e0b09fd4f76b385ce9992b

  • SHA1

    7f7f8d9277119a82aa995875d34f9e5d91a343d0

  • SHA256

    27f8dfc0e0590be3c35b6bc1696f38d26290bbee269fdedc9cfbda724e3579a0

  • SHA512

    7db19b241a0b0f68d191e9011f6d7506a0c3230e2703b23a1be552adee6a90f2117c91def67f58f84cfdfa6cb200e687abef0c38527b44dc7c3d92071ddd4ff3

  • SSDEEP

    1536:NFvdr/FmgmvMLOna1VJ9n8nUm9TlA8zwWKFxdw7CWOpOwrkS0q:t/9CMLB1V/8nL9T2KEb63wrkW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ca5353a0e6e0b09fd4f76b385ce9992b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c35a00a0fc292e4da0e28d6b72382a0a

    SHA1

    69b9eec82fbcb35143e92c9c714d4aa4888fe56f

    SHA256

    42d5fd352b686412fcfff94f31db2d90be2aeaeb32afc6a4a0773104723baed1

    SHA512

    8db32d68688ed1c36c1b885e94077836ac8339f3b8b769fc2cff0e977cfed45607db0d426a41a3f61fd73f2da0fd503d1d4a45c4aee540724f767fdf0afac3ab