Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 13:41

General

  • Target

    6706130913ae4ab12c400b5f781ea3fea5346c39557679eb43c921373102da11.pdf

  • Size

    10.0MB

  • MD5

    d2d4bfb66275dca2307170080257de29

  • SHA1

    685deb028d1e108bfc947d76e3e7353609c05b8e

  • SHA256

    6706130913ae4ab12c400b5f781ea3fea5346c39557679eb43c921373102da11

  • SHA512

    0a6a595e17bf88789905b4aa91055ad4bf92f6e77208bde3dde098e277d3f4ff96e8ce613921b2d9e380b917b9f7bd208c6a4ebc04d64a611bb953bd1662b032

  • SSDEEP

    196608:PBFq+mq5Bm7PnPlM9AMq0CmnUlj6D+1GCf20J8OIjSXt3zz:S+mnrPCHTUgD8nf2mV7Zz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6706130913ae4ab12c400b5f781ea3fea5346c39557679eb43c921373102da11.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c0349262d3eddc9d5edcd1ab66d261b8

          SHA1

          fc4e7e38324d5233c6053212d95eafaf7ebbb131

          SHA256

          37518421f5263242c05c1eb9f42879d661675153fc536aac7ef88c6e465c44f6

          SHA512

          5fe46149f8d7021d40d10a6b63a4ee1fc6bcdc49441af84e38a0ad9916917fef08cbfb2f1a72cbe969414ee2254b7f7e3811a37313cbdd5bf048aa00ac014387