Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 07:35

General

  • Target

    edf36d1a-fec0-4b8a-a888-c1cc5aa56a6c.pdf

  • Size

    99KB

  • MD5

    c982c0ce63a85b7c3fc2378952df137c

  • SHA1

    99be1db76cb19419ccec166a5bd87e34a1aac580

  • SHA256

    87542d4b75ef1b83156ce66007a9027e1cf9349c06585aad9645f39e602af374

  • SHA512

    3463ebee468f0b714e827038e278413285cc21a69c6244d2bbad534aecf235724f66d80269d573c04136f1c748c26a8881005607185ae1a66e60044709f944ff

  • SSDEEP

    1536:DUOf7OuRVH5kso39nd+V5+d1RmElReutTVd49ucrsXu2NtWa+cJK36L6O:AOf7OuAk7s/tBd49u472Nn+cJKqLr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\edf36d1a-fec0-4b8a-a888-c1cc5aa56a6c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c0c77efe52667230581e8d96d70507d

    SHA1

    88a931326cce4e57fbb5408375ba09e136af6588

    SHA256

    619ecc64ee3afbe447f7442ca1ff3c7bf85f8e309f8a02189f98b0e11c9e9cc4

    SHA512

    f21ff4021803cdc880a67089be1420b594a3c55a738bb2705d966ccda44fb5fcc41246b3e97bca4949e149fef4373896766282519ee3c775d800d869900cee75