Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 12:35

General

  • Target

    d62165a6752e13e9faa3a6b9e796bbfe.pdf

  • Size

    83KB

  • MD5

    d62165a6752e13e9faa3a6b9e796bbfe

  • SHA1

    98b17685850939ec3c23918302357306f9cbffcd

  • SHA256

    d77cb0f58570192723b3776c78fb82a64c6a40146d190f5cc508524b5af35f48

  • SHA512

    8a45c514e2f234db9825a7a6dfb571681269b28874e1a7137355a2ef7230b99f51738ff884170f17083a51ef268d1d11e9a32b1e4b691d01c00f0819216e927f

  • SSDEEP

    1536:gIcdpFJiYo6jUVymUZuNqzgqJrgnjF3N5BXEg7WZicbT1n3WOpOwrNTKXFsR:sAKalUZOqzPr4B2g3sTt0wrKU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d62165a6752e13e9faa3a6b9e796bbfe.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0fd11501e2d627539171ff4c455fdb66

    SHA1

    6fc0fb571fbc9ef0d2e159ba6974903a2ae47ec1

    SHA256

    2faaf5227ee520aa0e5d6d93b3824079e6731216d5e4a3740e865a69d851fc5a

    SHA512

    4d73a30b96c87e57add4bc7c332e07e94ce43dd28ad34fb351287e7d075bd1902b34794dc2a37eca75e364def7845053b148a31fd9adc54a12375658863c3a49