Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 04:30

General

  • Target

    cd1bfec6074fa0e774b41f2ccc6d3dc5.pdf

  • Size

    74KB

  • MD5

    cd1bfec6074fa0e774b41f2ccc6d3dc5

  • SHA1

    f9f270233636de146ac6056424aee8594ebd7d70

  • SHA256

    c3e1f21b963ffea8194cb608cfe8562e96cbf9fdcc6f9ae9614e68bc22a77f30

  • SHA512

    45b414b4f40ddec2b202a10a63f6d1ed9b15bd96ba03b657a04c26a4f8c0f4354ff452e9a096a54d5a923fbf15a85e1847d1f7c712b57d9f7a69ebeeed0b8baf

  • SSDEEP

    1536:7N2b5NXKQ/eFdSXmn3mXtcSw9+XOaDWkNpOPaW8mMwnBhTO/XuPetsg:IbN/uUm2qFowPJbTOY2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd1bfec6074fa0e774b41f2ccc6d3dc5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5bfb9f5ea86f363efb4514f24b2bcb56

    SHA1

    51b28b73ece24b0ebc1864c53ba32c8ab058ade1

    SHA256

    8d7a386a9b99b4c9080d6e233f176c9cfe89fd27652807ad8da98a44fe0c0891

    SHA512

    97c549f76cdc4ce940efe1e07db1d9cc4bac2abd329e388b5eb2fcc2f32761cce63c154026e6898ce1656548e0231842128c4a9bdd508e26acc60eff2ae07cd7