Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 15:32

General

  • Target

    Rechnung 9104486091 _ 20.pdf

  • Size

    121KB

  • MD5

    29f80e1a3399a3c25f90ce26c50c8179

  • SHA1

    a092d58bf3c7371164f42c62a6adcd03fac40d28

  • SHA256

    a322ab822d9a04daa1538a13667459fa5d2fda88ad4c92d510512e753e13e537

  • SHA512

    9f5be9724f4004fb8a6c76de25cb8653e00021d2d9fd06917d242ca7079e699d94f3506c03d86a44b93cc3ef670e9afb0ea279d8babc882039c4721fc8a0c9fa

  • SSDEEP

    3072:ADzGFcmJ4n+c/+Ar8i8VYTx9tGfLLmP7QAR:mSFcI4n+c/+AQXVYTD4fLLmPR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Rechnung 9104486091 _ 20.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6255a89da1e9b1d54c14ffb11e56d96c

          SHA1

          985d92fe13977f4dc27c83263e215dff88341b38

          SHA256

          ae15ff297f125052722cabcb3d097305fa409c03e19bc6bf51007c0cdb9a7dee

          SHA512

          daa1a13220f0cf5f811c58a886680e6761057cb6240c31d1977a35bf336308bcff6d30639ebb7962e0f100bc4602327117bd5849086919223a64537c3153d92d