Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 17:00

General

  • Target

    d40b328e88ceb4d3993603e0d5d6f022.pdf

  • Size

    95KB

  • MD5

    d40b328e88ceb4d3993603e0d5d6f022

  • SHA1

    36435539947e875f76f89f6c5db5edf6d0ae63b5

  • SHA256

    d1b716e0e0dd281fb7a1d2296dd6d503959f83a9b80e214f9ccdc1445f1cefe2

  • SHA512

    8b49628f9d39dd5b3ea99db7e24e29a49c0443df8997779f3f127e81265b638daf273a3380a504b68ca0acbec080d6fa79ca2ecf66c9cc5883ccc8d292a45c48

  • SSDEEP

    1536:NPPkrI1ZLWElymjA+RvVgX8tw4ROcu+Gz3Q0uW7AQZW+XKeYa+PWDuhI3fpWUpOv:1P5WElyQltwbcufDPnvJHXwWDuW3fM77

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d40b328e88ceb4d3993603e0d5d6f022.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f74aa7867fdd8198ae5e9a09826ce1b8

          SHA1

          0631a361de3ca0cb3d1c83817aa1f41cec2e3b59

          SHA256

          260fd813dd8db5520c7e70dc3e55d81bf92e0c843583d47379e647fd614135d2

          SHA512

          f75b14d009c9360853ae633d1525ff72c2655b83e8e67e67189a12a8ea2c9d421d596c18c21e96cb30f3e60524fe0bf30a228602ce485ed9c5a6b16fb908f9a6