Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 05:53

General

  • Target

    e0ece0e3f65ef27f48af4ccd1a0854a9.pdf

  • Size

    85KB

  • MD5

    e0ece0e3f65ef27f48af4ccd1a0854a9

  • SHA1

    c615072488a3b9fa3ac7665f0af5601fb29d8175

  • SHA256

    f380e5b32795ae257e982279d5e677623f5d5dd2b9882c1eafa03e8f399244e1

  • SHA512

    346cd8495219c009925eac8c9be3623848fc6513801455be8732f46f419e374f8357465c000416890d8e611d9bfd8fdedd7f71bd800fe94fe68ae6c84fdae14a

  • SSDEEP

    1536:s+cMaBP4HOcGqZo4ciul9YKPVglUesJtFJQlQTPWypOlLzZMqv8Wi3zeA7/:CNBQHOcGqG4Pun79gtsLOQUlLzl1Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e0ece0e3f65ef27f48af4ccd1a0854a9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eff8074f14b9dc3666319deb25d58447

          SHA1

          8615bc536d937a2ffc53b45aa69f91290ee9622f

          SHA256

          7b01121a0e98104e4976e27a3bf71b1cf25a5ef3f4fe327868c375d978e8bcb0

          SHA512

          2fb99e396cd432e462bdea1c13ad081417e83e226a25440e3f64f700de31e08edc19a969e4e63ea62d15b59ab2d08c77de97e2e925aa2de6ac64b4617c610707