Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 08:35

General

  • Target

    e13d5a5e7d1dbcb77504d186cf5d7729.pdf

  • Size

    76KB

  • MD5

    e13d5a5e7d1dbcb77504d186cf5d7729

  • SHA1

    9a31714d0948607c85567370d5a44471f722d724

  • SHA256

    f254ff18222b2a6ee9551e4b5b10673a46b668eaa92adf07c9add82555c59e77

  • SHA512

    b282346420b31649cae8b6c39b0f5942204cde6b4bdb7817d8655b6b9f46f6dbf21a3ad326bf220db4f2d9d76da4a4f39ec891b3b6bd821297154825a245b740

  • SSDEEP

    1536:wqCd0626s2dRZIyu0K9tZ/9BVLIxc4JeUrQ32EWipOPhWHHjflKec4iMb:fu26s2d60KfP4cUrPwHjflNc4p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e13d5a5e7d1dbcb77504d186cf5d7729.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          53ac8bd32351558d49c2420f4fa38658

          SHA1

          a723fd1b4e4498c450ad16c394e67a8dd75e2e92

          SHA256

          bbe8a7d352d4c838912c1128397675c75b47d93a22d19e270439ccf7190de748

          SHA512

          cf4ac1323a9e77a5f754d31dd92dbd16281e2acf0f60afc96092704f887533b3dd2c00218aeb35964f706a92675a1e297ea6b2d6d783c8316f3c2d063127d9ff