Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 20:56

General

  • Target

    643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf

  • Size

    944KB

  • MD5

    121e70d295cb05ff711e1a787266317e

  • SHA1

    97fbf6249872eb6d32b03a40fa12beca65081688

  • SHA256

    643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da

  • SHA512

    ecf934c6e4f0c54eee1ec54de93dc8cff88d964340fe0dd3def0f39b1d86123e5ee4e3574fbccb03e05a2fe964f28456bcefba2e9f3a858213c8f92a6c23d806

  • SSDEEP

    24576:Eh/zPuN2g0FC7hqw1ageOt3+2ACNUcFebvit:irPuAqwjyQCuweGt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4f1af1b6efe6ad8a9c81176e8d361b55

          SHA1

          da1910c70a34ce4538eb2a708b5ac8c348f86180

          SHA256

          6973b6b2639d0f87fee32c1f833470fdd11064b22c3e4b65e173646fd8ca2a29

          SHA512

          b3017ad1ce05fbb38a41c43295ed279b12d5ce44787a92c42e8a94b2907a36bcbc0317a803ad1197b9cd3d8f413812dd1403f4992c6e6343474599650c564971