Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 19:12

General

  • Target

    cc3419855b6eb7022b948cab1cb5a88b.pdf

  • Size

    89KB

  • MD5

    cc3419855b6eb7022b948cab1cb5a88b

  • SHA1

    69d88283a1c7bad35bd241d77a0e6177903f2e8b

  • SHA256

    9198be7ded8c8906bdc790683a229cc08f8372c1b2aa2472baee6dcebffe61ac

  • SHA512

    3fc942df2754c5313a29ccf8613ab34c6902decbf4da2796baf030fe3ef962187f85281fa0691eba1a25f3a266c730dcb1d05e1209cee5e4b21c82d2822c03db

  • SSDEEP

    1536:eoQUSDcXhP4K/TEvAmvCN51r4X/bK1Pbd+a5UdLY7WGpOKb7PwduWuIQEIXxRgxY:QUbhwK0Am6lr4vb4Pk4Uq8KXPwdUIjnu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc3419855b6eb7022b948cab1cb5a88b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1c7c35b37709691472173d915ab9c8a2

          SHA1

          4c2b9b8725dd154ce85541b9ae55bd1bb388ca0a

          SHA256

          682ec859d92fff44719bb473a60b03a19bbba13a2bf0f1bd0d1ced53ac9abafe

          SHA512

          085e28af8cb592bfa3f241ab1081271c5f49c70c8382a04112b644b73e5af577983305a6433711d0b79ce30f8be42fc817be460e4f9198d099f4960ec18b7a49