Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 04:15

General

  • Target

    d52b7523f32bac4a441aa43116b146de.pdf

  • Size

    46KB

  • MD5

    d52b7523f32bac4a441aa43116b146de

  • SHA1

    b9e52120997a59c2559a3bba8fd1d72b121a0065

  • SHA256

    66428ca5989f2410c89aa7e9652f145f44cb8d32e7b970d83b443a0b9b0621e0

  • SHA512

    09b74748a749fff7af8fcc058a2955e0ed2848d33c60e68cd013f0fa70de34b431c64ffb142c5002117bded4b90f613f2ac444940a77cd5fdc33786227eaa01d

  • SSDEEP

    768:XrvrLAskjdSXyt89H4f+OwySX1MiumZLbYH7YBblOaGcHvelsH3EILwQ0jNB:XrfAskjdShY2OwycumCshGyvelsH3bH0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d52b7523f32bac4a441aa43116b146de.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e90a894c854bfe5b5787acf903cc6ae7

          SHA1

          a2f2b44448c4065f19b9f11127e3417c3201215a

          SHA256

          b90386ab4d9e1aebf6ff99c5371e18702aab09b671d671bce729166031c1cb70

          SHA512

          d72a2071a90941f1079a36a6a488bea984b7505093c987c3a495bc7295f946ee58c1274d8c2d48d9d0d0aaee6cd2b954bcb36c1981843b7be4f61c198e46be3f