Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    18-03-2024 14:50

General

  • Target

    d3c86b9c6a2eca45bddfd1ad2ad0b696.pdf

  • Size

    84KB

  • MD5

    d3c86b9c6a2eca45bddfd1ad2ad0b696

  • SHA1

    de0875e9d83df7221cd139117ed54bdd9f75dd32

  • SHA256

    746f1b899419663189baf16ba3b4c3a008a473a1f25575fa86d85de91207582b

  • SHA512

    a6fcc5b551b3bb6d0f18d9b9b60f26f509fb8b6ab9e283ac627994c0437be7b522a220b8e9b037a76663604b15a7b7a5769063bc6f39e6ba0f99731521c5f486

  • SSDEEP

    1536:pjQgP0wMhTft6X7n4m5nPeu3NYA7PwuJP4z5/yN9bdcNHM2mTVWoigSa8/:pZPmfALnpdPFNY+PwuWz5/yN9Sd2hPih

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3c86b9c6a2eca45bddfd1ad2ad0b696.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d6d71e932a3817f7f42420fce65854f9

    SHA1

    4dcf7fe12b615d4096e238c8d927e21ada3d9594

    SHA256

    e7137b36d3ee84359f2fb44cef82d8976806300ed1595ec6047fc4d9c3b03765

    SHA512

    4dc2ee4e361ec2f57d6ffb109865af54523038344968ab25ec03f643f229124e3262c8b48f31e64196a676a0bf227d0df86bfd372f7151aa9d8f1b27a263e078