Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 15:22

General

  • Target

    d673532c4085df0b700859452d91c41c.pdf

  • Size

    89KB

  • MD5

    d673532c4085df0b700859452d91c41c

  • SHA1

    a4e11592fc1e027b0aef1e57c5799063dcd89ba8

  • SHA256

    7a0d53125a8cd56b6387dbfdad5913597966f3c1e1dc75f6964cd439e54bc86a

  • SHA512

    48c52a65ebb3954bba78b3ef5b94968bcad84911924a5c7cd1564e20a8d773dbfd3eb2f2ff5a0a004b3dfe38e060c6c64f661d39a63aabf3773f5471137eb898

  • SSDEEP

    1536:8kOz6agQDxa0z5y9fatnjSthc0xHJjYNnSNZVfvIWGpOKCWldybc+VsORfnqrA2B:UgQDVVyR6jS7cCHRVzVfvdKQwMfnb21r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d673532c4085df0b700859452d91c41c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    404a0088d324d32e8d9fd9b338234e0e

    SHA1

    0999500e1ba0713f5ada26798c247b5190b4241c

    SHA256

    c43a54e6b93398b5acb27a92b1ae4f5df9a46e790828432c5c47fc21a1099581

    SHA512

    0545604e0d91b9dadfd9f450566cef1ae5c998cc68a01a95ccaba423603ba9016f9fb9659a33876852ffaa53ade532f4317c7fb3ed7230337190e6211a2dbf6e