Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2024 00:18

General

  • Target

    7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf

  • Size

    250KB

  • MD5

    cb23eb0cbbe6fa3efbc0f03da2371c0b

  • SHA1

    58f3b54d3bfa3fe32ac761767004a1bc24fd5953

  • SHA256

    7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623

  • SHA512

    a5f5a9358585cd48a0ddb39d80d9dddfc2999ed4360640711ad27d8052dbd85f2736b9f1c6f574ecfb4d3330dd308d4766513b126b6222b249e155d453087f59

  • SSDEEP

    6144:YseXuARaUnp86+uPNDPpMEPEoJUgHuPgorpntCG/LlmugzUC:YBuAcUnp8kNrqwEoJUAuPgordxLlmugv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7da302a9655dd6c604759530a985f22033f95d961d611c395b194cb44473d623.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9dcbed0dc5e5510d70a9231ec25dfa83

    SHA1

    a06c24038779af32b2261cbfcefb2e558a7a26a1

    SHA256

    e1243bbc524c81ffac63e44f044ce95615f89b4070998ba7f70ec8b01de2c4d4

    SHA512

    c35526c61da9c4f4082f53473a84104c51c21d743a2c405608a29b4de81b0b95a0ddc1dc4b5ab8a8682a6dbde50b1182a0e1c6bb3935d20344a9588789b3cdb2