Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 10:17

General

  • Target

    cb27496c8bcdbcb795d546bfb81364ff.pdf

  • Size

    39KB

  • MD5

    cb27496c8bcdbcb795d546bfb81364ff

  • SHA1

    11c4aa4ad314b3cc92a92fb0357d538c3a1eeb24

  • SHA256

    976f5e45f2adc51b53de69a35965e7ce2703f1ffd6f7c5c30c013d514250a191

  • SHA512

    6df2ffe50da42ce3b5c4bbad8ab8884f12028ed903163d92782a94bd5b7701a56c504b07d695a6ba9337f7bb4357350658a4193d69603944ddcc7cb71a37aa27

  • SSDEEP

    768:XNRBmuhfj16ZlxtlVEWy6Y3V9A/AewbGw8qKcCVKbd0/CDYhn9jK86b4:XxDhfj16Zlx3Kh3HA9wbGw8qPOEd0a8d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb27496c8bcdbcb795d546bfb81364ff.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e70694a3d9e0d6e3ebfc16984aa17f13

          SHA1

          361d1c3d03072a5fe181831ddab7241330f90b80

          SHA256

          2c6a6ca21ffb06b6528ea75c6238f37564adc7633581cb8f69ebdf9ece31d1a4

          SHA512

          fa45203fdb7c54fc4a81189d25a608a57ed0f70218a004d2e13041c620be11e4c7df71e910964b146a71a4389f054a9ba204da3d32005554ab2cba09e75ae049