Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2024 06:09

General

  • Target

    f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf

  • Size

    365KB

  • MD5

    52943dc2fdb1e377c3669bb7d71cd48c

  • SHA1

    f32b8e3e0f05d2f2fa33aa44fa87a9d9f52662c2

  • SHA256

    f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76

  • SHA512

    b51901c6343c4e39752b0424760e8cfb7c137ed246479ea2063a0e8ad9cf132729b279482e41f402780d4b661cf864a2b67d6024fdffa9e70e4c7f66a5d31eeb

  • SSDEEP

    6144:XXaCXbIEcS8PXP5RqRfLeDkFZ9F9w/gy6TJ+w3BfFl7ED6tPIX9BISyARUkv:na8ItX0fLeDM9Uz6TJ+wG6MXy0v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2c405e467b90450a525cd246246373bea76970339cd0b19514e7594c15b4b76.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ee454c11dffe79640c2fe7305f0f09f8

    SHA1

    50bbd3a518feb952f7c2606b4dd99d4bf4666ce2

    SHA256

    288a794cb6115bd8ea813e7c38a249634f85863356400a0507fc51762d3fa01d

    SHA512

    8027ac145d9dffb17ff8bbed7ff5a12232e22e66dae1dc25ed53653776f188f22f01555208e86319234172b65b2372d84c559e9f5cbbe673aefa447bb40c7cd5