Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 06:20

General

  • Target

    f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf

  • Size

    242KB

  • MD5

    7a1ac0d316ff6f1d7296525b2c40a722

  • SHA1

    7e6aae1111863d4fa478692b5f9dd7768ba0447b

  • SHA256

    f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e

  • SHA512

    3d7d7302e7218a09bb7e76931892b8d185a7e1ef6e2353e67dd9794f72304353f510a42ad6fe537a2da1fc98262aede08ab9d10781363088aef174705ef10822

  • SSDEEP

    6144:frNoslQuFqBYLYihx9AOVcIiE/+Qox4DZe1nVXdTOt:zTlQucKNhzWDEGT4DZAVct

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f66cbf133c76fca7fbef66f449c04b6fc16d57f0a6487d4772513efbfc52196e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          336ffdb9438fa5025513ec0fcd3d770c

          SHA1

          c6f4ac07432067918ffc09896f409fa633ab323c

          SHA256

          dfb3f776085b63c5a67966a4fb8fa1a1bbd5a4f09bb128e5307df27587121e5d

          SHA512

          7ed419b64bf76353c7f8e6c8609a361fd67df8cdcd0c88c54beecd1360871b77c38994a37e0588c9f8459dbb56cd5ec897be306c43a802948c1a7e28dbc19ec9