Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 23:13

General

  • Target

    d751126f045869117f277b287bc54507.pdf

  • Size

    61KB

  • MD5

    d751126f045869117f277b287bc54507

  • SHA1

    15c82424da6f10392e0c2cd83c86de4d7ea8ffc1

  • SHA256

    8adcf87dcb98f47d5df082d0960afc9e94ed76fbe93cf4b49abae4f817f5ea41

  • SHA512

    16a2b5197da8b21e6978c8456dec056734f9f33038a2e0d251fe5b3ddbaea515d60b87c142aab9ae70e8072254659d97e9254f69f279d1fe06c77c470e9ea90f

  • SSDEEP

    1536:j1JJi82wX4mjPOgGYpS+LXeK5Q3TwZhCGZl+NubO2rd6JQDUBv:jo6XBj4YpSKXeEQ3TwXCGZl+T8Do

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d751126f045869117f277b287bc54507.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d73c5035e40cac44b48a9cabd95d09d9

    SHA1

    fef38f6ce52c584ef4dcbabf2f6bcae01246aecb

    SHA256

    89d11f8e81845060d79b684006c6d326c202af1ca7e2ca5ed9e8873226881c78

    SHA512

    5717720a1ecd17b62327adec444fbf6caa264610458c94dd7cd03e47a70f6f3bc6f104e932923af268be9f844771350e3fe169c0e1137c7d68e22c1072dd46f2