Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/03/2024, 02:53

General

  • Target

    d7b358b2d4bb0d8f580ead132e4298fd.pdf

  • Size

    85KB

  • MD5

    d7b358b2d4bb0d8f580ead132e4298fd

  • SHA1

    ffaf64f6660467af587297b57b20e32b0544be3d

  • SHA256

    0e207fdb2a24c046c18c7e2043abcabbe3baa01dc815a7b07a9f971a5b5765af

  • SHA512

    cf234cdbde6ccb1fa747f3ecfaba98cfdf18658b73f10d4d410d436fbb553b0ecc0cec8089a939b679620549ceef94572d19fb4133074381f02780cb8afa3732

  • SSDEEP

    1536:GFmfEDDVl9oZRhaaLl1IiI4UYtIxaLLR5ZkEKqriVKRnKDWapOtQHWjlvsJioAz4:Ji5l+ZdsiCYtIxIRQLWnMstQqAn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7b358b2d4bb0d8f580ead132e4298fd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1804

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          090bf30392b790faa36d4e5c61abc2ec

          SHA1

          f6617c84b5b3d8247699b22e60cdbc8398b9e645

          SHA256

          d2b4120ca9490e4ae89833e6031dd861ae30d0a68483161c72dcda4611c4149c

          SHA512

          f982500ea4c9d517909bbb28989d410ccee8e4e4df694d8a9a70b94f4b5545681a5a685d4cb997cddf51dcb258414323c487b1045a0d293edffc05764acec9a3