Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 12:37

General

  • Target

    de07729cfbeda29ddcabcef907e16239.pdf

  • Size

    91KB

  • MD5

    de07729cfbeda29ddcabcef907e16239

  • SHA1

    d6d57ed60fa3ab7a339ab05da7f7420eeda0b7c9

  • SHA256

    ee18b35bac6689dabf497e4a2b3d7675a67e2a7aea64bf6ba8764daa5cb51099

  • SHA512

    b93ecc6f6c63797331dbfc5c63e4600613786f24518eb9af30bea176e5576bd69f0e326dac0f8e6ca660ffda3b47e36ce585fb5195f2bc78e56f0a2ae6740e9e

  • SSDEEP

    1536:RnCKv4hdsNJi+9Bn8RcE5M+Vi7cjr1TZNem+ejnE58nGXtWVLGm1DjP5AtWUpO7/:UKv4hdszLYM8t1Trem+qETOn1DD5AQ7/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de07729cfbeda29ddcabcef907e16239.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eca6e3bab7b3fa6a676e12b2d5a9021d

          SHA1

          a7046a0fef39430edd3b99132f461267c932bedc

          SHA256

          cf2e8f16fd270ee3d1e83c4c6a27845c60f9a73b2f5e7fe3adf24dae9255573c

          SHA512

          be750a74c3b1fec61f74eee4526be27123f4fd22d530a421ae7309b5ce9625a39fb6992091f4d401400b3a0f69f7ffb7539fd11d21c42adadf8791f1c78fe779