Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 15:16

General

  • Target

    df7935975d8e699dd674090fde870208.pdf

  • Size

    91KB

  • MD5

    df7935975d8e699dd674090fde870208

  • SHA1

    b24790a8f21d55289d8efa209483974e55fb5cd6

  • SHA256

    4ce0e63d324d22e99423278219d5dc9c1d611d617128dcea5aef57aadf88cebd

  • SHA512

    de4f866751ec97f82632f691faff980fdcc7198b0da252505fa504da0809d666c97580376b04f39c1f7aa25e5fc6b2811d899d726cfda3cef99946ac4dc7275e

  • SSDEEP

    1536:y/W8OkEvvYqZ27SPLUqyOOB3tVCyoNdxdQx/KapKBbuS1is4a7PUeOuZrRpIfUNj:qLl8voaUqoLCdNTdQJKfbuS1Sa7pOuZj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df7935975d8e699dd674090fde870208.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          05395db40d7a17c71db59a20e9152f09

          SHA1

          e970d704d233811b9a072171fa161116379492c5

          SHA256

          e9e8efc6ad661e79b5ee77df8b00529bd84c8dbea74eedc1ab91fc5f9af0281b

          SHA512

          6207f99e40c586709426711c1eca9f75ff65068136a178ae8d3f7ff96fceaff66b8b97fd190ee62ea1aabc3ec8afb859f3d5c90b4e5458d5516a789851a973b9