Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/03/2024, 03:11

General

  • Target

    d7bd16b139ce46db4f679be14af1ebee.pdf

  • Size

    86KB

  • MD5

    d7bd16b139ce46db4f679be14af1ebee

  • SHA1

    ad7e871d139d71ce7402ff66f9b424f309f7bfb8

  • SHA256

    85dd3178148dd8af2400436c03e067f8edd2b6558e34a906664fb5d2c253c1ab

  • SHA512

    75f54ef0aed870997e7b75e4b3fc3999445f432312c530995626ff6c83060fcea5c004a4fc8e2e099983e436dba56ad6e6dcb4b82f2a0b3e942ee34d5fbef4c3

  • SSDEEP

    1536:lWnW1LBgJdaJUs6ziUGBx68rJQglG0FbALZmqWtvmthyeEkNRiWUpO72D4:9tgJQJDmeH60u8RFwmDPqNRd7/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7bd16b139ce46db4f679be14af1ebee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a9c619f846d95ee6f2d18f7fc6fc49b7

          SHA1

          1927add3f8a0c473f451860a1f8f54ba76ddda06

          SHA256

          c06788bf15c4b6ce405a5c4698f8d6759aa578854d79fa71e8bccf21d9f3ecde

          SHA512

          c17de16c75bb5b96667ae6329e9dde254d4d764a1106d3059113e8f3a09f27729de1348d975acc45e30b29431f8ae8759865918e85fc0d1b963c3d662658c9ea