Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 09:44

General

  • Target

    cdbb610e125686dfc6672cc899206cc4.pdf

  • Size

    89KB

  • MD5

    cdbb610e125686dfc6672cc899206cc4

  • SHA1

    fbe366bfcacc2f1537e1562b8ae7d8faaf159695

  • SHA256

    891b2017c05f47f245eb61379e58ddd184387b4c119e6054c99dbfccc0b74404

  • SHA512

    93d4e819cf7e5c49ef849594a154e9bca5c3da5c3ef4c2d85caf201ef603867b54c8851b707a0b309fabd8ca9725707bf97c9edfa1603f0c612412c4289c3e17

  • SSDEEP

    1536:aFYPQnwcZORViuyoOK5++HfC8p/eVdLpqBZNEcWsUcf6rsJTWvcZfL4KEkdu/+aN:CYmwcZMiEOK5BfbmVNc3Gjcf6rsD/Qmo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cdbb610e125686dfc6672cc899206cc4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8e4b3f8be300f34bc4eb3e3f391a61b5

    SHA1

    a451ace14c227c99e40e16cdbfc6ba004cdc80a9

    SHA256

    9767886c097663c78246226bcf4ee08fdbcf35bd074f72db39e4d6e140f1cdc0

    SHA512

    44934b965630aae5e428b7eaec39461493b143de2cba354e85d234b460e011b8194602a8b2f21a712139d471186e96962e58ccd9e8063c31c88492dc7125c1eb