Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 15:41

General

  • Target

    e20583c293fa87ff759a9ff9268f3c6c.pdf

  • Size

    82KB

  • MD5

    e20583c293fa87ff759a9ff9268f3c6c

  • SHA1

    e24cbbea65bf86579975c5c4a8239c24603239fd

  • SHA256

    3ea2f6c52bd8cbd7c8143d1f4d073703355ef0eb0c007a29d5c7daf410ae9a2c

  • SHA512

    fe7a1964be2970dfefecb0530dffd35e08435cdff7d78bdb14d869eac66ef7ad30277b1117eed017c100306e7b000e37711fa1a9060df9a3b9df6f4f1261452d

  • SSDEEP

    1536:cJ+PQp5oO1FH6z7brmkdxnjv6UP9KipuxLkVfEraku/ZM2sW+8/++wwWspORZK8:epzjqbKFQ9KiAxna1/ZM2S8W+wLRf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e20583c293fa87ff759a9ff9268f3c6c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ebe947ca6b90227919eef01a84158831

    SHA1

    9ac6d922da2fffd02b078d026ac2fbf1dcf0b7b4

    SHA256

    f06a28305323a5eb99ae2004b30e8a457a648fd609c4ae85087b3180ab870673

    SHA512

    9980073b42b912bde2990357a4bd29793fa377f3562d67c68e15cd8104349ecc061cec7179bd6a67f96bb49fc9fb1d3579c12e198c87711c8cf871c4304fedd7