Analysis

  • max time kernel
    157s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-es
  • resource tags

    arch:x64arch:x86image:win7-20240221-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    25/05/2024, 01:00

General

  • Target

    Documentação Thiago Rodrigues de Oliveira.pdf

  • Size

    5.3MB

  • MD5

    ce15627936cc192cb29b5d175b1fb2d1

  • SHA1

    a23cbec0c24a33be9d4200e0a0a460dcdf13a61c

  • SHA256

    f2d8862ab367bdea2177dacd30a767d6029a4fda5b53c8536fc2e116c26184ae

  • SHA512

    8b0a5cf4fd17b0caf2801f4a952afe5db37f7ea66c9cf28ac13a3134a07a0e2a01c1e50dbb94a90a569d92cc7abfe9c7d569433113ecc0f8d82a32da090d88e4

  • SSDEEP

    98304:B0KWP3pJQ1umqFvfCIfmdTV1At1lSgfA21iaPTUZNmcNN/WgT3Fag64Rl7:Bv+pCIfmRV1gV7QarU+Kai7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Documentação Thiago Rodrigues de Oliveira.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4ef7fdb08d19611d5264caca37fab10f

    SHA1

    d458672e3062b609b4c1f50a5c965ff2c577cc84

    SHA256

    c7d0e75d26166e1eaffadfffbee8b9014e7a2470358f663e86af1f0ee636ad0d

    SHA512

    d54cce4d67aee2f500a43567b7c3825ea8bd5eaaa0f84c127a4bf91d890486777304b64ca3b31324dfe359885ea9ccb984eb26249aadaab2338942e6e32f3070