Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 19:45

General

  • Target

    1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf

  • Size

    301KB

  • MD5

    c36d509ea343dbbebe4111a379a9e5c9

  • SHA1

    8a0b62c222e61df89af3544d7bf9f99ce797f01b

  • SHA256

    1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b

  • SHA512

    733ec89bd937b782575b1be8224041c58571cb65eefa618a1d3f5fa0257acec9a268316994dd393c6d11bf9ffd2a3de549cadbe60084b25b6173a3c222c7da1d

  • SSDEEP

    6144:0vJRc680IFOVIlujRePZtvSGL/WnXr6jEzSNA3NBIjK3Rm/NCXxvdvs+:0vJmh0eI6uNextvb/EXr07AHAqRW0Vh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c993cea30a1b6eaa3c850afb02cb2d5073bf81fef702b9698cd38b82d208e6b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1096

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9e0f7550605ee52f06d171f133aebebd

          SHA1

          4f63eadc5966accc037f583e7b372312d4fe856f

          SHA256

          93b6866ae692db4999778d85bf1ad8d9e0d62079a103c2bcdd03ac568d0e2825

          SHA512

          288fc6ad7c77a7a7936751c12b9740e4cbd6fe98cd616412a5abb76527c3163de0243ceb18941d5ff99cdf437a27ad51a16e4d2839aa31640051cbe957040382