Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 09:21

General

  • Target

    e15248d1366f4305f1a1c5688c2b8c80.pdf

  • Size

    42KB

  • MD5

    e15248d1366f4305f1a1c5688c2b8c80

  • SHA1

    2c3888fb9a138be15f3ed1fc25608cfbd73d4f5c

  • SHA256

    976b41a9f772079da896cbd99f29c729523bacb3dc5c852b7c87c90525c77720

  • SHA512

    188474cfc4fd22d94ac32a45f8876727237254803ac4079549cb4e521174e298f2209cbced0904caf94f562bc91efef0be0e952e8ca509b19fd10850f6d5f707

  • SSDEEP

    768:e6/RfM4YPqVYCgYRoV6n6KP3AcwlTH5CWVskMRoHc+8VrZ1cmUYwuImOVxgB:R/RfM4NRoE6KP3AcCTdVsDRn9FjwuImP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e15248d1366f4305f1a1c5688c2b8c80.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2c09ada630db4fd81490d66e4466772f

          SHA1

          8384c6abc40db593e3a8ea5afea1e9bd0ccad7bb

          SHA256

          363028a1d476bd50d4db7e732c57cfc1ee093467a6c2c01199832afd5a455112

          SHA512

          4f16804fd9841ef3b7d13b51a6bb7b983685b3c0aee3944fd8cd2773a29713d4c8950b24735212d3c74e2ba5285941d60e45f9d83af25792ad43685f9541ad44