Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 14:14

General

  • Target

    d3b6a30f265538ed6c0fac020d483586.pdf

  • Size

    92KB

  • MD5

    d3b6a30f265538ed6c0fac020d483586

  • SHA1

    210d8530f9a9e34a05204629a43691eda5e56f65

  • SHA256

    e16fb25032c55d5aaad1b5daa41fbd2ba38f7dc770a936a9c22984ce59ac4434

  • SHA512

    2bafd9fb779ad91db0c9402a70ffa85075b9f0567a0317be9159c642db722b1bbb737f1948c276c6da6a6b003a98138c6cb3afca0f38425bad012eae5bb17bfb

  • SSDEEP

    1536:gQe7OnZDv59rZXTv+Zf6+NreceNvlKBFz4Uwo3rgSpnG+Ct0AZ2XWXmF6Ah51taK:he78DvXdTp+NrSBlMFMgrgT9Z2AmTh5p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3b6a30f265538ed6c0fac020d483586.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9eeedd80f3b9063b2f1c8efaa98ae3bd

          SHA1

          fca43cf72c1873da14d2d546d5ffdd518e15bbad

          SHA256

          04295edec2e5cf081c4ec422df2bd4d4af14390c60c1a8959230d5557da63bf2

          SHA512

          97880c887e4d217063675cf0e88a01cf3c8f1e4566962cbce1c9844b84ce9e61f28d0afdc17b52375b97a92c23e6cd74b199185a11327b0ed3ee6b7cf109cbde