Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 14:42

General

  • Target

    de419b812351da68acb86137cc418c98.pdf

  • Size

    84KB

  • MD5

    de419b812351da68acb86137cc418c98

  • SHA1

    a59d26d9cce304c0f832ef27c6e446e9dba8f6e2

  • SHA256

    5c8a941fa7e38fb07efd8fa3088252a782e0ca0ac19b3af04a201e9575d0f288

  • SHA512

    0cd0dc3128cdc540c9ebf93d4ddfa4abc2f23ed7ec1a48dda3f6be986d5d0032923e90fb77d6c8d3b8d58aaac1f9af6c3e44ec4994723f64088c831fe9f180d8

  • SSDEEP

    1536:a1nDBKbscLJ98zol/eQe/CsMhUD10ibSytKtWGpOKCWsJ8Mm64a9PILkyfxpLt5:6nDBKbCsl/eQe/C7g1vbSy4iKDMf4kA7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de419b812351da68acb86137cc418c98.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8aa168b8d1ee07e2abe326e259fc2e4d

          SHA1

          f12bcb3dbd5021c5513027a18901e1f282930143

          SHA256

          be91ca1962749df6f21530bcbd570e31b9981c982225b22f94dc7d4ca9000903

          SHA512

          6b49c8c433ef32ac4a4c8a63dbbd73c90cc3c38246c9ebbf35b27427071967715586469b9c7d8a59c3472a042de2e36da4e7dfd8f79185510d41640ae64a4dd8