Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 17:48

General

  • Target

    d6be930c069dcb90e5cafa5f469878dc.pdf

  • Size

    87KB

  • MD5

    d6be930c069dcb90e5cafa5f469878dc

  • SHA1

    e132185f69a10ec265c236b18004ac4071ac2ecc

  • SHA256

    32e4b0114a64a5c17ae9c37bb489b910a1074b9bc0d3171a4d181e6c3718ad10

  • SHA512

    d5b6a3df02db30c2cd7f25b1bee9d27acfbc418e9a5e15960f100a0888726f0bca838c02277d9bcd5a5ffce4f38e729998bf4b50113dde3c3a6fc9d3f94006df

  • SSDEEP

    1536:N8MBPXpFEw8dY5gl7nLm2QppJ2vf8RiWTQdHqntWkNpOPxQ4Wx8cH2Wd57sq24ee:rRFOdmI3m2QjJ2vfuTmPxnwHq14tv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6be930c069dcb90e5cafa5f469878dc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    89f0e03b21475938b8cf78bdf283031f

    SHA1

    b80e79550f7669deffaf3368a1aa9d4811cce90c

    SHA256

    5285b219ae1787e4a23d5d3e1410247ea91c02821c312fde2bf8d5dd96d59628

    SHA512

    db08b016fdabc2a8a5299c4bedcc7f40d455064ec19ed1fcfe740ef35c278cf773686e2142fd0630707f39e2f9e26ec96b55283348f4406098e595fe8afb98be