Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 23:58

General

  • Target

    78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf

  • Size

    1.6MB

  • MD5

    3a8ac6bc2298ef953673c675c733e4bc

  • SHA1

    e6e76ffcfb0cbe7b2a6f9c4c4f04cf764b218147

  • SHA256

    78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc

  • SHA512

    a22c4e7407cf29278ada08040ec10a7845de576d874b376ef4c30b7947114fda27d18184bb0306d7cdcfe06101284e01168b83be0daa6c3e033206b6fb035378

  • SSDEEP

    49152:GCgI6H8DY1rFsambFPf8gWdqT189DI30z++e:GuQx1RFmoqWC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78afb696c429424e2e61e0ab79d66726ff03fe6135d9ee61a65f74d51c7d70fc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8ec3363181351724f8846149db498e0d

    SHA1

    d3a97062c3f99fdc40053d4b267fdbb8880a3e36

    SHA256

    bfb9eb3a4ea412d747ceae8764d662a55a7ec7b7b47dc708c130805a3776698b

    SHA512

    41bc57752f890b9fcae12e2556d475568d97da0145be5326bb9726f21220a9aa4938fe6a6381e1f38e9a16daf943a7836f80cca180edfc07b553e431cd56b219