Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 07:44

General

  • Target

    Referenz Nr 160422900879.pdf

  • Size

    131KB

  • MD5

    32e6ff4158d9643f6dd01323501dac64

  • SHA1

    8bd1d7b19225698a7c2d448049f2304f16a20b39

  • SHA256

    0dbc3add5c2143f3c251332dc704ac6f17f6be113240152516b835bf2215175a

  • SHA512

    86041020082af945dba5672f405edd86d89584a7c21140547f8e2449815fffa531a5e2c45f296b1814cf539c4c12a33075e46068af10a07f58442019ec14f602

  • SSDEEP

    3072:aNvGk/HHIzGkTmFXZ49rF0P6EAEOwNByYpeQy6VC/hU:ov7yGrFJAU6DbwNoSeQyCC5U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Referenz Nr 160422900879.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3e3b4c1b1a836c81bea4af79f8ecb77b

          SHA1

          17d3df3ec51f6b7daa32d836470b23434aeb05f2

          SHA256

          ace050fe37e9c782c83a288491b6ba01ec007905767a3b0b1910cfa0985fae92

          SHA512

          d09fca7cd0ca8817c4270101c73c8525f383221e679ae9c8c613e257d52e784160cd70a189372daf4934d36f8495ba60f3d82a9ada3c5d33ded81b1d6cf91050