Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 21:33

General

  • Target

    Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf

  • Size

    259KB

  • MD5

    f21497f906c74cc7610a6a8237187f99

  • SHA1

    fb98da9d67c8b470d73848fc363d418902a46475

  • SHA256

    fdc9008a42d03a26fe7dd36804329031f51a3d75f6b091bf0058938a4b6f65a2

  • SHA512

    d13537a661cddcd90e49da86150238ed115f0d5e54d435b22d18dac0de56e1d2e79249be7a33080370340583b736ca9e6ba3e0cd6c4a347ed2729b36853d9f81

  • SSDEEP

    3072:UwdBOjOxDsNSXWv5UoiMWvzo6fnHyzjbcIc0:UWAOxIAmvSxMW7oQyHQk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Arbeitsplan Juni 2024_Version vom 30.05.2024.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bb2ff5e0a4a2436b313a88603e06b1c0

          SHA1

          9ee921d52f3580a803ca793c2db1fb6e7683f574

          SHA256

          dee0ab6d143adac044a388184dabcd69ff38860bd362fa1493b30f9ae0545301

          SHA512

          add7557b1eb448c5881313f693b509ad7f64a027ce029298e6d49981b657fd6b4a1bfeebc10b030485fa8c37a6744478d7eee7f808b7a51da0c75b4e09a7afb8