Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    26-03-2024 22:01

General

  • Target

    e03220e58da7d664f1a6f887bb9a2f40.pdf

  • Size

    78KB

  • MD5

    e03220e58da7d664f1a6f887bb9a2f40

  • SHA1

    e2327ccd14a4c1b3536d3a891dbfeb6f49c7a810

  • SHA256

    b56e2fc3c6b7bd914f5dac458a1dd6c638f8cb623e42a1318853c0d0b1815423

  • SHA512

    ab216157256163cfd0db84b2334e90798a2a0b6cfe7de72010fbfbbb43a23defb938bdd277bd3556ab0743ea8c18e809709395854194eb706bdbd56c04a809a4

  • SSDEEP

    1536:94iY68nC6xqOkxOx1bSd2Su6V9m6FWmixlMVBZ9tPpoWOpOwrKWx7yijbzumXh:eMbJBOx1bSg6V9JFWhUVB1plwrv7A4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e03220e58da7d664f1a6f887bb9a2f40.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d660cd0e5782793521a5f8da723266e9

    SHA1

    1fc2ef0ad6d0b7d52512a73c2d35df872fc12bce

    SHA256

    99ce9c21fe9e6dd6580700498651771bd3faee7ad9c0bafe903a65787eebc0a5

    SHA512

    ab8cbcc71b178841f3e23ea0b386ea3083e208e9a0a42b711cc9a785e54cf25a2e00ae91b82ec9405152913143a77511fe40de76a1fac26bd83f02472b0ef6ac