Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 06:44

General

  • Target

    d575df6aed7a911baf55fa76dc75ba33.pdf

  • Size

    84KB

  • MD5

    d575df6aed7a911baf55fa76dc75ba33

  • SHA1

    d8fe1b74efe248ee6815224f86e805ba0b90550f

  • SHA256

    aa33ae94a5952566526055c1377339c88da5212f3c08fe0b9028b34711a63e0f

  • SHA512

    bf0b7c3e4221d20972e2c40db42516b4c0bae121537f1f8739c0c81730294902393d753cdea76bf94d9c180786ac65d2d8741b8686ac305d3388254c3d3f3ca9

  • SSDEEP

    1536:Pl0N3PgwI4/FAN+e2cYJ465xeEKxJz2wNkSLg9yWiyu9vQ69qWapOtQBUe27R3z9:N0ZY49iFOS0DKLz2AkSk9E9v59XtQx2r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d575df6aed7a911baf55fa76dc75ba33.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b4dba0e6f28814be0500283de9e8c5b0

    SHA1

    45daf36e0f8252573c162cf1b9c72f7720487ef5

    SHA256

    31e906fad73fbf93010bd0d0a0f8b7dd9bb899ef4cffb369748446afc0e03ff0

    SHA512

    96d30ef1dc4f9b6dfcea07be85272c6e127d02f2e39026bce7bf5c9ad559846ef62fcdffc6b0b655be4c7858e81a15903c9e90879d017729cd683b956ff4d119