Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 11:55

General

  • Target

    Graillon-FREE-2.8/Graillon 2 User's Guide.pdf

  • Size

    1.3MB

  • MD5

    59b3677c6e3062fed2caeff815ff92af

  • SHA1

    c88a30f959b5fe27201a2d7e46ac25036b4654d6

  • SHA256

    44d4ab58ab19bae55b1b31a60ffac4d7a17529356c94270251aa0ef43581c2e0

  • SHA512

    d540ca3881c5af6be62fd0e0d183ede2b8c4a6ae08d499b015780e8831ea84eeeabc2c276e4144e0e168e8cea7b282de677e9a534100c74d1dc3b4f9d02b31e7

  • SSDEEP

    24576:TdXU+4DDZMGWh8T5isXXS1As81LBVfeddbxsAKvD:1U+4yGW2bXXUAz1dVedHFKL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Graillon-FREE-2.8\Graillon 2 User's Guide.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7a367bc14133ab33a3f1594bfe176dcf

    SHA1

    33bc830af43bed2bdd5d1893ed2a9bd3d210042d

    SHA256

    53fd408923e3c4eed176f522a23936838aac4a4b9a87e064898fad925b3ca8ff

    SHA512

    ab0c2ae3060a211d9073c7914472e12991233014f03451df7c99808bdaa1c9683919373a439df99b1e514e3cfba147c13fbe8b6a3591d73d0b3ff51f4cbaaf9a