Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 03:41

General

  • Target

    dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf

  • Size

    236KB

  • MD5

    0bab3f270a095dfba3ea1a31e00d5327

  • SHA1

    5bfc721643b98d15e2bb96ecb55d9e47b3debd1e

  • SHA256

    dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c

  • SHA512

    676e9369fe4682d0c7a84e64e2ea72f7600fbba3cf37687164cc6e5b721015ab7c0e4f99002b7b964d20750371027243f9c708a531ed32ea1c2391c0bdaaa9ab

  • SSDEEP

    6144:55j2M2Yeonhyh3Fz5qje9P6TM2s9k1yZCcCJsH:vC3onhyh3Fz5qQCTyW1yZTH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dc5bd201b33cbc76eb0f731229a2da824d8f848c2a2f1fba94f85674c7f27c1c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2820

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3ba8028bfbaf29f7da713a643480d631

          SHA1

          134c25e15c16859d3baccb65aaafb15c38dccf16

          SHA256

          2e11fd38df3edfa2ad3778d039003c08816c33d1c68e8d00109d76a7c0de782f

          SHA512

          8e07156d4f3dc825c75b8ce59be71857457181d1973793a21683587698d2029df0304b57aeed513fe2deaa1aa4eca5c6222d541d94a157ad50ff88278ae43f9d