Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/03/2024, 03:05

General

  • Target

    d7ba58385b78c8961a0261c8ad8ac9fe.pdf

  • Size

    91KB

  • MD5

    d7ba58385b78c8961a0261c8ad8ac9fe

  • SHA1

    3c2aeddcd1d3482f55f4b16d8114e559a683bdf3

  • SHA256

    e90515e9766856a2181ab2ca87fed3422766390d85afd10bdeefa340ae1c4b0c

  • SHA512

    0addba1b08d6f66ac1d8aa03ef178e35607b8744290cd3b6be9caa65fbf6bd047df8ed7bf0c9574634f01789ba83874a14d2a02ad28661646a9d70aa82eb8b0f

  • SSDEEP

    1536:HLaasQYZ/pTyAGyzgLeHaepYegzLXDALnw5shcCzy0EeoFUopcWn+4qk92cdxqWI:rZLs/IAHgLuaeiegzATqshzzEPUopce6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7ba58385b78c8961a0261c8ad8ac9fe.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          43625d0138c6360088336446bd050c36

          SHA1

          43ea05b128d73044befc902e17b32c947edc6e82

          SHA256

          f986b0988419d908c3399e8b8e7db65a167d0061ace652b2d55c065041cc7b47

          SHA512

          c96378584c1d67c13c67cee889f1c9edf88b4365e5c910931d6a4b9bda187825a2495d7e2367e2e411e74b54f1dffc85663ec0384a7a502e198765cb624d604d