Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 06:29

General

  • Target

    CR 04092015.pdf

  • Size

    542KB

  • MD5

    01cc15fcb7afb2e54a7e83803318f386

  • SHA1

    ec663d6381a6bf6e4dd0abfa25cc7f209c472843

  • SHA256

    28d0a92fdbc195d5b247d0b8a07e6725331301a9aba427acb24ad82594d37d35

  • SHA512

    9915fdf4c11def2cb468b63474bd3dc391a78e96c223fa3aa3410bca7d20c5e5388642e3c557a88043c3816c4240672da8d127dc91fce5ebaf98ff762b40d147

  • SSDEEP

    12288:IsvpnrDoMOQdYkkBVo/sBVC8iessZDxldXzy1U:IsvpnXlOPpBaUHZl+1U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CR 04092015.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    25182e77e3bc84adcc2a8aaa23a07e22

    SHA1

    8f551e9ad0f5aa512407d1f4c385bf2ba2cce697

    SHA256

    9c83fba295d2d11788b756aaa2cd65db4fb3929a8a97b60b818a98de56224ff7

    SHA512

    9b467bbf4ad9d464c2870de92b38cf1bb0c0e82c8db00a6b4b74da64842b318fe03f7b24595042a31a32281477591664f59d50f551c49c7c571aae04d0cd2700