Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 07:54

General

  • Target

    cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf

  • Size

    240KB

  • MD5

    952cc4e278051e349e870aa80babc755

  • SHA1

    b2dc60511ccf81873961bb912c23848ee96505a0

  • SHA256

    cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99

  • SHA512

    aeea2aafd2d51b6d61a388db38c0fb3aeea40a983ea441a3a543340d4f0044e3eedde825df689154af97c2e457ce32ffd55350614b4a2482d72e141580734beb

  • SSDEEP

    6144:rfMAUwGgLUHxI3MCGF52JB5614WL2LcOHhGvvmagzs:rfMZ1CMD52fNEEBGvvog

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc57c6a2e938e44d84e21e262a2f7ad0afd0fb098f0983820728dab6a33a8d99.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4127e1e75ddd782b7e092faef7d33d22

    SHA1

    995e8a050a244664fff2071536ebbae546799279

    SHA256

    049d16d3ae1b18cc61bae3212e5ddf37777c3c61a3d5f9289ebce8fd511e6e55

    SHA512

    5772ad8d0538da5cf4e6d2453344be31e4acc85e9bb305ece9151311d87bef5bc556999d0bcaea37805fda77851d62310aa0e227e1700d641569a8c8317e68cd