Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 05:41

General

  • Target

    cd40c63d22f35a24ab1a4675aeee289d.pdf

  • Size

    34KB

  • MD5

    cd40c63d22f35a24ab1a4675aeee289d

  • SHA1

    cb98b255627e4be0425ed9ac5a31b65e843a660a

  • SHA256

    cf10809eb6c355e177517c551e604dc1879a9b6dcaf6191c3ad8b7115e02593f

  • SHA512

    48e62bf61130577fb48405988eb24bc3ba5fc6f9ef2fce41a90df2759d930a9688fbcf16b2c9b0c079c9a8cb9fa8e9f6d602c1a25e90c456da33e37b837f51a6

  • SSDEEP

    768:+KEZNkLJcCMZ2uAayvKuImE0dGlJ0Es2w+zrA1KaZZGACyzsM1xVf3V7A:ZPlEsVwaZZGTyzsmjt7A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd40c63d22f35a24ab1a4675aeee289d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0e048a08c4fcf29345199c7a185176ca

    SHA1

    3031e5245de8a19f734315483aa3b514a4920ecd

    SHA256

    ced31f69b5628447b7b09a2228158c7cddc25d38ad8003a00a3080c8365e18c3

    SHA512

    2c9236dd531790c9b2aef63ea78d5b97055ee2956becaffb4c053b434bb03f4116b1075096992ffa0d93c0a3cb5c5a788070e4a511bde8018d06ba3c381ba75b