Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 06:27

General

  • Target

    d56d70aeff5f15dca84de1acaf1173d4.pdf

  • Size

    37KB

  • MD5

    d56d70aeff5f15dca84de1acaf1173d4

  • SHA1

    2e2d72030c35225f1cf174d515adc84ab71c755a

  • SHA256

    5e1a7a4537acf30f9a895f6df39a86cb29a00f69e7158015cec5347ca4fbf22f

  • SHA512

    d75e2f46ac7ba363eb699b69d6a3a69cbfd9b4cb7e2522b1bfad216691922917fc9167efea3b6b45812ca0732aef1408c9474d1b5f5f8816d356622ba4660f26

  • SSDEEP

    768:ZUv1PWU3AEY9wEzdO5aSofHOx+oEc27FlELD6r05:uNOU3iwEdAHofHOxqc2QLD6I5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d56d70aeff5f15dca84de1acaf1173d4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cd764ea731d842578ee30727fe39674e

    SHA1

    b27f927cc2032f5222b17834cb50d1fb4d1ceac2

    SHA256

    8ccddd6b8375ca8ccab712651d8a4cfa52059435e0511fed0e7d6864f3227a81

    SHA512

    8fd630ad3d47f387ba8f8753aa2af5d022fc598f29b2f967b90357b0e6ae2c3ba2b06e13fd501e66b659d5926fd81138d71491ebbca8e6201306e7a13fe35066