Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:29

General

  • Target

    e0e2a4aa4cf0cf09362e47634318ef0a.pdf

  • Size

    83KB

  • MD5

    e0e2a4aa4cf0cf09362e47634318ef0a

  • SHA1

    0a68a6ffd9e3c4e98764f1ca0304fb9883b2b564

  • SHA256

    e1100e7d420f66c99ff9be070ed74a08f7768c2952bcc132d98b56f22bdf74a7

  • SHA512

    9e1647edc91bf1aca9e56c20898ce799bdab01c71c2be8379d03d6de9a84301ab7aac819d161eca9ece0b05e1bafcae7ac02a55f621c11c484b5c1be01db9c6f

  • SSDEEP

    1536:oOz8X6FLLNTT523/9Y1NCzSQdyUk8kVKRDNuA3WBnDUqWfBox0duHWxApOGjdH:L8X8Ld831Y1NCzSxUNkVKRBuAuDzuBjU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e0e2a4aa4cf0cf09362e47634318ef0a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f87805b35217cb6bc2c316241d95d7ba

    SHA1

    501b3cdcad190e2a6cca4ea65cfe7abbde4263fc

    SHA256

    ceba29bb5507ce9fc790ce8fdf28b4875a499a988026ba32099329e43c879145

    SHA512

    c33b309f2a762a29893fc890a9968f2405ea03799a23e4bb82611fccfef232502526b005c7287ca45973a34a07c9e5f6e05b12a7c48fd547c1093beef0e3ce18