Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 23:14

General

  • Target

    d7515c6f106a70f7b2f3602ee53238ef.pdf

  • Size

    91KB

  • MD5

    d7515c6f106a70f7b2f3602ee53238ef

  • SHA1

    2134a636adf0e92b6a59a1e3ee54bc6c96a9b601

  • SHA256

    a6b98bd71f9674afb97f28457ac4c2f61928d30fef2e5a58b973800e4baa1caf

  • SHA512

    6d7d46ba66f52bdb945574954cbd3461430057c0e02605226bb94ffb33061d368923fb6e911f7d109c5498f4a62d1e8a37ce27fabeb5167479bc88e7575e2107

  • SSDEEP

    1536:8RL2SZnf69khwzViBNb33PuM/UA5nnB2YCBQ5Ln0QVWRNN3Mz4W8pO73WzNuszmr:8L28S9kEO3PP5nnFz1R4Nczj70NM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7515c6f106a70f7b2f3602ee53238ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2db230977d6e9bf6e778389883c5d3ce

    SHA1

    c927221b2509300f307d4af4f9852b7355c6889b

    SHA256

    ccafdc57ebfac8775a77e4f7ce18fce975481e461ee824912e201f9e6ee185f3

    SHA512

    d37a123b063c23fd9463d8f333757659b6c972b868033c3cdb147b5abd821ebeab278d20c4a1edbee496ee6e2c5d0c71f417a0af880cafc427d818e0fb72dddf