Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-04-2024 18:33

General

  • Target

    0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf

  • Size

    361KB

  • MD5

    c829af0498a1c610464f25df6fcf1cc9

  • SHA1

    8a3f58203812207e88b9e670a2c04d9f95f44769

  • SHA256

    0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415

  • SHA512

    b89d6eb3d5432d29dd2bbe2ab5355a9a586b5adf3534de407c289c0313c1b1656492f30bd3c8be80828b654c2a0897ea8d7e4af63b3862994dbc54d064f161ab

  • SSDEEP

    6144:8tJotd2I0chhU3bV02nHp3XeTxNWCxxzv5fUeB4eL186gR9XfkfffmAMaa7M/:8Pot9kLRJ3wxNWCnzBfBfqTfkfffXG6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c7c56fce16f9a6b87e956fa0863c2a9e9927feda7d85aa213523fe1e4c77415.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7bee6f3d56deca2e52692e9ac3649ff4

    SHA1

    369dab1d268b1f1a8d66c3603d5f5d1e7ccdb7e0

    SHA256

    8561bcacdf324e1bb6bd972da77d2ba9aa02119403149149d6cbb8e433a72bc5

    SHA512

    730d6ce56581816cf29ef98b8422a41de53430eacf7764e4167d70137468f51f3614c17069c8477173b0b60ee5ab5d3a1fdb29a83859a238e373e7e9605161bf