Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 10:44

General

  • Target

    cddb8b4f2f0dd0c100d76e7a91850bd7.pdf

  • Size

    88KB

  • MD5

    cddb8b4f2f0dd0c100d76e7a91850bd7

  • SHA1

    7910c87c10207055126482b2da41e0209dae940e

  • SHA256

    7748af82848a67efd09066aaedee79fa95476d986d6c4b6ca4e35f03f188ecdf

  • SHA512

    e1a9829284f6bd9e08fb2bbee7598ee68c2307a630c740fb7e0b05fe3aecb50f125b1b16f9d7f5ce45f8d389db8c1e399ba1736ce8c66ffdfc2360c5411dc14c

  • SSDEEP

    1536:ObXLw8i4oo0RaeoJckQHP7itwCO+LDqPsMdeT1qA1okxWUVx8XZZGLlUG+W8pO+n:gElDRaeCcjjithO+LDqEMd2t1ohXnGLs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cddb8b4f2f0dd0c100d76e7a91850bd7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    33d5875dd9a9118c4e21a59d426f020c

    SHA1

    687abd3f25e50c77d98f7d091a56cd368f013661

    SHA256

    3258b89125a1847901d47fd96a1880baaba59fac0697edf6322d7ebc1f8a2038

    SHA512

    811d241f7fa280dddfa94657c9cd8990703c009efd9047ac4d94e0335e418d88510bf4f847651279887c3c738af2ca59e6d7b09e57a62d331e14dbd3a5d21d7f