Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 06:24

General

  • Target

    d56b7fa915aed67ee31d8411122f1d51.pdf

  • Size

    43KB

  • MD5

    d56b7fa915aed67ee31d8411122f1d51

  • SHA1

    935c51505020a3f614ac751a393ffefb6fc65caf

  • SHA256

    c0533c5a680d73cefab10098e682da78e272724edd29635452c47726a82e112c

  • SHA512

    f0d62577b9b2d1fc0fe950f3df073d5236c0383ffa9b8626fc27675209f3f92028c1c666b981be0c34c5061b0742577ca52bd81b6641ab54223b2bb0222e2856

  • SSDEEP

    768:3z3BFUG1MbdG+y6bB3jUY+zwMBKd91KbJ4WoxJkzNjoTIjP9OLcDl:3zJiGkbB3jJ+zhBKfo4WoxJqjjVOLcDl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d56b7fa915aed67ee31d8411122f1d51.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f21c2d7280006c24c6fd2485a92da48b

    SHA1

    cf255a1453a5619f0eaf1baa9e0c59bb231bb9d8

    SHA256

    567c7ae7f4968a8487a859d738ad5112c4a59993c3315cff4a89c81b37ee0d05

    SHA512

    9f580eb03965313fb587dc8ad0c12ba33e5641923af568f3294999365127f2e00657b7c1dc7533dbeddfedd81894ae5040d26eceb54774b9ec0449ecfbc913ea