Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 17:28

General

  • Target

    e233d5e3d7493d228418947c03cd6b4a.pdf

  • Size

    37KB

  • MD5

    e233d5e3d7493d228418947c03cd6b4a

  • SHA1

    26df8a72931e0e6dc6a1a0340bea7151979e9f37

  • SHA256

    cdf4106ae172b3cf881658ab968ba5e514ca022037da9f2fefab8cf8c026aad6

  • SHA512

    beaeb7f6045f94fbe8147e68a6a8c6e9da2cdaf45dababe0678e83facee3fc8f03b40dfbb0745eea3c9bf8fb11e95637ffbcb642a5973cd5c5fe9f5398fdb904

  • SSDEEP

    768:TW6hAHqlhT+h2TiA5rkWN0t/+WPtdA17nvn05/tKvgAj:HAHaT35VN0U1zP0JtKvfj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e233d5e3d7493d228418947c03cd6b4a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dc3e979b389d04ecd7e03d33f385b357

    SHA1

    605dd0d4d7b9fb188b3e728b4dc0f191240d537b

    SHA256

    da877a1f69e2d771a8f197112c7c1ae99d243b4856da592825d434f431b317e3

    SHA512

    4261ea70761e076c387638c4061894ec129396ed95495d8a6ba13a3dafe8f5c42de5956edae25cffb4efc11f39d7e18f6be9090ba3904370033eb5aa681cf776