Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 12:44

General

  • Target

    ce188a1a9701082564f6801200763b6b.pdf

  • Size

    85KB

  • MD5

    ce188a1a9701082564f6801200763b6b

  • SHA1

    db5f28ebbd392f2a77fc86dbae0612bddf41d871

  • SHA256

    d14af82b8ec1e2a2702fe0568c332e1f2b6522b4d70702783ba2d256e8f3e2ac

  • SHA512

    3b8f7bb392a087b02d57bc9b54d70847c258f30d5027b18520af14f31eb887a5156f32eb98d00ef490bca3180b8048b19c5c5ea9d0e10f87df49659cf6041d94

  • SSDEEP

    1536:QSdnmTwl5BsFluK5lzaPgtG5nVUp2SRf99XYpgCHWCWJWP:OgOfnzaPsb2SRf9zCdW8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce188a1a9701082564f6801200763b6b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5949e953432f0f9237b6d7af237cba01

    SHA1

    17d89c618a2f9bb34acd71ebb632f2feced2567e

    SHA256

    e00681eceb0bedc3b1a96d88e4110af943917949c575d591de4e8649e5ca0bb3

    SHA512

    cba707bb8842bfc47a152a9ca6ad658773cda699e9786b8b6c6f7f35db6219ae725c94cfce77bac3506f8635a2f3dbea014fd99d3a3622dbbf063cddffbf7519