Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 19:45

General

  • Target

    d45d08d6b7dcba09cc3b6641bbdb6a13.pdf

  • Size

    87KB

  • MD5

    d45d08d6b7dcba09cc3b6641bbdb6a13

  • SHA1

    ac8940b0a5f817dab205928a2f3279347b6823fe

  • SHA256

    3e0db17a4e243cb7ea50e23a3845fe3e9edf47ee8a6991f859e53da323d1fc3d

  • SHA512

    9e6a099b1c396ba88ee6a610e0b91089acc0213fe0c4d65cee56843fb1e2c6e80316a86715f0b0e79ddb55dada1eaf5618a9608fd3d0076de03aee49e6f42d4b

  • SSDEEP

    1536:HwEeai7gPg0adg19c7HDZTMw356uZRC/YYcXpjWkNpOPaWDlZOEURHZnRGNabc:ZexgYhTJv5lPxKPfPWHZnR0t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d45d08d6b7dcba09cc3b6641bbdb6a13.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          de0d08ccd6fb3af7d3d871ac64c0fef9

          SHA1

          0509912d076d183bb22bda67dd2defc30d574d74

          SHA256

          50b70f93094f8632bffff3cade535b0286af6de9ca6c65de7c4e5a8260716404

          SHA512

          02745ba574074e7230d3a56208fde97ae005e85871a40fdca6750830957b9e8c1dc7a6c4c388b6a10e7c55fd96622c6fa15164a65c77d41ee6d33de038aa46de