Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28-05-2024 08:10

General

  • Target

    e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf

  • Size

    366KB

  • MD5

    5cf8123463caa8acefa3204145eeb79f

  • SHA1

    218bf00a769cb5cb879f12162cb5f221aece3fe7

  • SHA256

    e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2

  • SHA512

    d886dbdb324d1a12036b66f4778f823f0159d95d219e055c318038d050c8ab9a03a3523e30f14b2352d685938793bf63d3cc0be6b79e69b0494cadbf52de124f

  • SSDEEP

    6144:Ab+8sFyqR3M35aJd42T5nWTGdfeUAV1u1lIRSln9hLSnAZ8EdvdIz15gSeP:Ab+8sEqdyQZ5qyvAV1u1Rn2AZ8ua1d8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e73c84b6841084eef34b35e81ed2977ec4782d9966f7358b68c8666208a86ce2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e0a998fae686f2f29dc4f6deefdc5ccc

    SHA1

    e4ba89d848e35c7381192e0b620cebba0da1ad30

    SHA256

    33c28f999b5857d1e08447ba4e9a5da60d15aac14cce05e9e37376e06db04bd3

    SHA512

    149365db4917eacf8168bbbdc94cfac120b851d6c2a8acedd1c32dca45fd01703052519cf2335d02b644e57b2d663b78aefa7e69cd0dadef4bc80ee7b492a395