Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 14:52

General

  • Target

    de45bdf8d41bde0c7793b475dacd2af7.pdf

  • Size

    44KB

  • MD5

    de45bdf8d41bde0c7793b475dacd2af7

  • SHA1

    05f6e700b0434c81431cdc9589a7faaf475d2150

  • SHA256

    d03cf94eb9e6e270bb60ee8b49abea2da9ce80c1a0678a9ed2d4c29047c75da8

  • SHA512

    6e73b1ada7e9e495f567eb482636fda33e10513b6c12c636186020fba43a3a4ac8410f2e9a49103630d4f6150869bcc68420fbae6fb4a1ee5b84f56e884deeec

  • SSDEEP

    768:6fYmgu685VNrp3Rzq32exwY0DtzwVeuga6hV6nhnEESh8GYCXtQr:Ig9YV7oGqwY0xzw9KV6nhnBUkStQr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de45bdf8d41bde0c7793b475dacd2af7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          717770ccc60d2b14495a19b2af0e86cd

          SHA1

          1fc5a51dddeaefdd462252847b94f72027adf575

          SHA256

          d4a2eb1fc388323d78add36dde8c009d669ddf73f50a1d0f496743d37c44bbcc

          SHA512

          8e980c94b7ac83ebcfc4893098da8fd012fb5c6b85c4ad8096f529f5498dcadb79dc0308b258d85c35a0c9c68fc0662e4ed114e5a2b7a86bf16bb0e454d9f14e