Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 10:20

General

  • Target

    cdcdb76e0bb328f9a3c9176fa2a19fe6.pdf

  • Size

    87KB

  • MD5

    cdcdb76e0bb328f9a3c9176fa2a19fe6

  • SHA1

    215a7de235c3bbc67e11f494ffabbca4e03020d6

  • SHA256

    b10961e09bc4d56e3d4c270541b53d1a75f067cc6d3bf87bc391dba74c8ef8a9

  • SHA512

    efb121ba43ea41f42594e2b4571e3bb5f6a3592e5ba2dc3685d921b24ac0cf938a4a781e89e966364729b9bf9132f8b4cd2f67ea9831cccdedb7ed1e6b910d17

  • SSDEEP

    1536:K8aZPvmSoBmTwrQSJC9MsQ2NCy8g5jwW2VycYWG4nN37OTWapOtQD6mhB3zqC9S:3kPeTQwrQt9MsQ218SwNgcG4N3i8tQWL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cdcdb76e0bb328f9a3c9176fa2a19fe6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d119f51eab45f92c8520d48d5130014c

    SHA1

    c09513e15c6423290f793a92839d2f1504801f35

    SHA256

    534b3e8472181c116e2aba2fa76df34908d61a156457ef4863490f5995ad0468

    SHA512

    94f68f4ae42a9d5ee93272c1e105e2f4ffe5705bad40234fa36e4f0d8311aecd55fe92477ef704028d235fa07662f652bb634265d4fe7d2dad98726d6dfe773f