Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 07:53

General

  • Target

    e1296777c9ea91fe049b7033dfb79788.pdf

  • Size

    87KB

  • MD5

    e1296777c9ea91fe049b7033dfb79788

  • SHA1

    8b9b2cfbabe4e56a73d06f64fb78610419f995fc

  • SHA256

    1e958579b9124624b42bb020eb8d270edeaea8acd79fbf0cf2ead6d854e8d75a

  • SHA512

    8814286d16a7f83e5b12689286465fbf301672a844ba24df750cb01bd6dbf6d668a54ed5eb8e297dd79d3bfacc3eefb5bc4ce83bd642b78282403d9dcce3e4b9

  • SSDEEP

    1536:wrfVOLcP7/clQrZhDSTdWNu8D+6656r29cNEPWM5qkZzliL+5nqkT4i0WUpO7sFu:CfVOLcP7191Eo18UruoEXxzlmLi37t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1296777c9ea91fe049b7033dfb79788.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e2020423d9bbcf73cf76bdfccff61d74

    SHA1

    41d7f257e91b85d1511ff68628ce73bced112500

    SHA256

    1be08f6b6422ae1cc795f9fd20bb8c7d636e94c1c11f176d84b0722a74a0a78a

    SHA512

    4c2c28582a2833e56dbb8437005ec45567b07afb35688510873badc4a701b331f19ae5f7fd1b9cf88d8d766ef3ee11e241e819664293f693cbfa5b725a56bee8