Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 20:18

General

  • Target

    2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf

  • Size

    106KB

  • MD5

    3c2d883ccdf801585d48ac05fe94046e

  • SHA1

    30d023a3e6a513fc87e6b8480a2b713ae5e222c0

  • SHA256

    2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c

  • SHA512

    e348f8cf1d1442ba31456eabbe521b50240bfa44035669971294353682cdeaf232c4a0a1f1b5f406030482800c747b400b1bce160ac8e8f8c87806f14d7833a5

  • SSDEEP

    3072:jr1k5KGQjAzJL0qSl3kpLHoMA+PPrV0zEc7:kKTjA9oqa0tIMJP8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a89c79659a73f6ad4cd3e104659cca7812550c79f3c3a4ead36e0bbe4530f8c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    caedd361b64f875383171361ed0806cd

    SHA1

    d686933e7070de56a524198d18b7c25dfdf64001

    SHA256

    0a240332b6c0ac950d1ca52a6818a4d3f5b0c8115091da66a79781276c4ca68f

    SHA512

    a5e21e4ddbef4a94db45968d7fccb21ab887f674eff5df33289654c76b98f8fdb6b9fde9f75238a488159998a658b5d19c5ef031c40d0850422f23bc2e25bb8d