Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 21:02

General

  • Target

    e016dc04e796a9d4d952777cb5f89040.pdf

  • Size

    83KB

  • MD5

    e016dc04e796a9d4d952777cb5f89040

  • SHA1

    4cf769222809d1d11e8540b9f8a0c54f6df3c2e3

  • SHA256

    a71e6b6b826ea452e821a1eea772300e70fef7e263ed7e02cabf467d53360db3

  • SHA512

    11a0d251f10fafd993e6befb4a39bfcefd1c1349a9ed8a0ed3803188110534764aa28db2dbfca04a35a7cfbbb00cf2761d843ee8a13cce47439e061c2e4df1da

  • SSDEEP

    1536:GzwlujFjEMebY/VKm1FQLk/buCE/b+X60RaMvEfbxnW8SfO9y/u5MSW8pO7oHR:DuuG/1FK8HE/qX6U0efO9Yu5M57s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e016dc04e796a9d4d952777cb5f89040.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e0dd40bc9f3327b34cf6debd6b3ba2b2

          SHA1

          afee4825a517fa3ff01512871d8ea16bb3edf22b

          SHA256

          cef500a542df8be1f45f37fa8669fa851e384083d8cbac8a1c6330dcbd3449a3

          SHA512

          0b1ceeee29a203490abb60ba458eaa755f983486376024f6294fe4e6af7b271879b3a3939e3677d54e64dc8acbe6439c3c54ef1f3866b14d09319b5c7a53479f