Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 12:01

General

  • Target

    ddf5fafae6f17262d276587144843b7e.pdf

  • Size

    88KB

  • MD5

    ddf5fafae6f17262d276587144843b7e

  • SHA1

    893b44537257b01573ece6517ebf74df15f7a1ff

  • SHA256

    5aaeab077a8108346ac0ae300cdecb3794618ebc89c84b9934d320f59af96d9f

  • SHA512

    df4cb7c9aaf7c8bcf14df1c9f4e95f5d4c44928264f28bf6d770e851de2d7f84ff31ddc9c092e16a0b719ebb11c22af0f827b8587f21c22c54c994d651a1ac97

  • SSDEEP

    1536:3b7WpphJ5XZLU/wI2fnCX1fNQUhp6eB7I0dOWtQghS8UBNWGpOKHqO23WjAVq+YK:L7whRhT7fcfeUr6c7VmghSyKHqO2PVlt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ddf5fafae6f17262d276587144843b7e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0d3b5ea723ac9167a082e3c9cc0130e6

          SHA1

          e9ea3ff14925b463a9638135bb983d2e3131efbd

          SHA256

          6a6be10168b58e7ebe92b4f4c578fbf467a7371b5730e124c0ed1dcc80757e83

          SHA512

          6160418aeba20d807a7b3b6c8b901dc687554344cbc055d88caedd095e59780e7ac517e10d6d28f58d3a7c9a883f2bc5e556b51e34a087314079b5656472fbfb