Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 12:03

General

  • Target

    CERTIFICADO NR-17.pdf

  • Size

    845KB

  • MD5

    be63cca52bbd675f446d775249d62b1d

  • SHA1

    0dd60a0814ffbbd98ab36907a209e539ac61c32b

  • SHA256

    1c9f0ef20946241dc8c9f39781200fa5c9b3be89de4e367e60b51948ec207cdb

  • SHA512

    55154a7662a9d6e5029f74addf62869c296ad989bf51c5ba93a456478b93e85299996388ee1d26191e3d8cf07eeed10f2cf5160d71f075bd39d78a4e3ff4a48f

  • SSDEEP

    12288:kkZiYIe9joH2cWHp5khR8WiOjkk84sW1TBrxQDC0kIYEgWnK2OsHP3:kkbIisHeHrCU81imq1rHP3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CERTIFICADO NR-17.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6277c958ec28ba05117df788397ce9ed

          SHA1

          8f77d5aa88ab29edde9b207d3f2c513445fde024

          SHA256

          f8701a811174285b8c22e2f608f7b83187c0665dc170652395227b40d4bf7bb1

          SHA512

          10e97a370bd55306994698c3809d6ef8f75ead779fccf8384185d330d9b08e3e68c655fcaa254f8626baa87b02149b4d45d54fcafb65caefd722969c844ced26