Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 13:32

General

  • Target

    d63c2f52126b5b783e2a76b2c92bfd65.pdf

  • Size

    242KB

  • MD5

    d63c2f52126b5b783e2a76b2c92bfd65

  • SHA1

    bb07b55febd4f33b488326d44b6cf845834f1243

  • SHA256

    7efaee877c15762f2ca5cc36a02fd6d503916b41ebe4a70202adeb9f52e28459

  • SHA512

    73c61af4613df16111124098e3b8a1bc61e524fe503ec213ddee08c4d4b2914e606f0c9d15b883747a48f9ca1970cb635d480a3d7b22431bbd8471bcee1de18a

  • SSDEEP

    6144:r/938omATvmFZW5YIiAbBjKzskBAx/S91C5cn2SZlqCZGtv:j93CAqy5jPKzsk6xK91L2o4tv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d63c2f52126b5b783e2a76b2c92bfd65.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3a43043d7dc9f33a43e954017496c220

    SHA1

    2a07da380223cdc99c76e76c68a6d7f2cf217e42

    SHA256

    7f0829305e16f070f7e0f06c3a67108e21a2a89b5ce89e686e73bbe4eaa692b0

    SHA512

    a1072133e537ed5b492a135b90e449d929d27b7e407cc735303840494ac56c2de2b5ef1d5e7403d4ec7f59f40dbd83b96f86dc6f44f10b3f669878b8e635c2f2