Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 02:24

General

  • Target

    ccdf17078d6bc38ab8c18443e16fb24b.pdf

  • Size

    86KB

  • MD5

    ccdf17078d6bc38ab8c18443e16fb24b

  • SHA1

    65affec90ce747f5ae11b7ddc717b61b7e55f09e

  • SHA256

    1e689c13abefdd5ef173bf310c1b2b34566aed1dd5664d9599435ffb41e25418

  • SHA512

    185850b9257205e1c47836d697819e8e1198c49af5b263843a63fbe34faad91ef7b3ca56b79b6298d550ecc9128dd47ac512afa26c19e5917a0befa70bf30432

  • SSDEEP

    1536:kSDL8tWZe5ltHFmrVzZXajAcDc+DOZ0xwMvhAWGpOKdsUmGWDQ4DutJNd:dDotAe5grTqjAcD1Dm0fvhVKdsUkQtn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ccdf17078d6bc38ab8c18443e16fb24b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d0ab663a20d5e98df626942e1255c380

          SHA1

          bc6b09fcab55f487940d49056cf0e7ec9830979d

          SHA256

          6f2f4a415631eb6f67707f6315e2e091b7a7976e4e2a44fb4a8ae9f27cebb897

          SHA512

          5ba2c6547ffea70ce2997b666a038a5c9950b48da0e911f641908a27bad209f7cea424b5a173b50be4a6c2b9d916ed4cb79dcacf8200889f775a15389dcf76f7