Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-03-2024 10:55

General

  • Target

    ddd71462f11629a143a5cc70b0c54b6a.pdf

  • Size

    86KB

  • MD5

    ddd71462f11629a143a5cc70b0c54b6a

  • SHA1

    13ca6287b9848eb6d0f982ef76e106cf89b0aa47

  • SHA256

    c3f78b1f944a634ea31b9d94e0765cc4c50be14df13af7f6c6345a9128fcccae

  • SHA512

    f8310f55df8b407e697368e501a27ee9c70556fb5857c96a4915e78580dac51b361a7c9bdaef1d0ae30a1216ebe1897aa1490397052b47cfc86cbefa2cf81492

  • SSDEEP

    1536:quCpu6YBKpQAG5TewsVRUqcxewtsFH1JwM42N1/8uzK2MWOpOZyWLOQ4NS:PofUiY5CwsVlcxewWFH16pC8uz55ZtOk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ddd71462f11629a143a5cc70b0c54b6a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    735440b57596c43d7ffacadbd4b93e2e

    SHA1

    31d8c114a45bbad9b1338235525ad01d0ba1bd68

    SHA256

    3296ab1df1934cb5570a4b36dd195c58c096babb6e814725047d6c3997b5a7d9

    SHA512

    056a8bafa64a09a2382c0a680a1480e8e57a35720b79dbf9cfbc6fd05038838155167034c50ccdb58afedcfe508a5e88c5190ba99a4e687301e47087315d3405