Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 23:55

General

  • Target

    d4afed377e4f177640eb9081f161ada6.pdf

  • Size

    86KB

  • MD5

    d4afed377e4f177640eb9081f161ada6

  • SHA1

    210215e2b1f779dca3e71ed57f8692b9c2406238

  • SHA256

    b48250a4b8f6f16c12a6178e1078674b02c4698a6f7288e6eeab15701ea0b368

  • SHA512

    e92ad8b0ae16c81d35b3201fed5c97dd2899ad49a947d5253b7e25eacaaeeac2e328f13107a2c3e4d42a7da28c16b590b3b3c5c687384b314c519a611996c43e

  • SSDEEP

    1536:PRgl+c6jwMprO3gioN4Gf4079Hw6ZGGEe/lTa4QjkicxFWNHq2aYqx8VW8pO7gsA:6l+7HrOgixGQ071w6ExeREHQYqx8U7w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4afed377e4f177640eb9081f161ada6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b13adc704515005ab95313c712fb8d5a

          SHA1

          7e5c942c3396af1120a8164a357427457dad4f8e

          SHA256

          8876a572a94b2f9d659ebc744abc0f37c2768ac352e565cf0a1bc4ee779f545a

          SHA512

          63ff3c5679461dfef77221ca94dd1f059c282a95e58c30a4eba88f8125ea65f2ccae30c875b14e0c58749625c87acb9b155d31cd724c9e6000d29423ebfcfcf4