Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 13:00

General

  • Target

    edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf

  • Size

    10.0MB

  • MD5

    df54747d8645317f7c2dbd265e6d4610

  • SHA1

    331a4593543b5e6a67f9470fe55c88f7addaf142

  • SHA256

    edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b

  • SHA512

    273c671e3bce75da7430059589dace4c5f80e0a5fb058ea07ee955fafd9ff6ac633d39c3985036cebbd4ccc3dec4511b94ac0a94343bd166de169b6549ad1e75

  • SSDEEP

    196608:B+jXt6m9Rn7uyCqmatuzHRoLzSs03R0aKryTN4N6+FJaup5eZ/mIBpIRt:Qt6mjnyXqezxcFOhTK3FJaupQwtX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\edad61e80c9c93a63f4f7e0643aba7be8863221c4e79a469bd78f6123315251b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c9982053c6f9a50b5d4223a9d7c07b8d

          SHA1

          a64e1b1f4aa5fb30b149b5d6d32b260498b3bcd9

          SHA256

          12230aab3563a0a24a322b363c9597b8684a51379cf1f6b927735a08b7954ede

          SHA512

          f70f9142e5e7dfa0ecfa79c4f7791a2f234ec95a6007644ab5f9b39fd5b1cee8842f3e3105d01013589ca160cb6e2f6218c7bb36edfa13686c58684d921c4e8b