Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 12:16

General

  • Target

    Estv-Nov-2003-aGoy7cuDIJ.pdf

  • Size

    218KB

  • MD5

    ff4e85eb3057361361b01556eb3aa4e5

  • SHA1

    ef276114b885b12cc7321c726751a9fdb9ef90e6

  • SHA256

    5be3fb1ca325a75aa9721d713cce975bb96b9856f715d19e47ea47bfe2210b71

  • SHA512

    340908bf5cd1f4835db3cff9d13b15b3e79526e889da3e30b1a47f2822f554831c0c3ebd17730174cdf5cd8447bc892460cef3019ae85d023e8f483c0d66f4ea

  • SSDEEP

    3072:sM2K3pPA6Bb1vwHx1OEt/m2AqaOzCFb+fzvCVraVxnboZ7jyR8uwYCNp+iRyM0y6:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM0B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Estv-Nov-2003-aGoy7cuDIJ.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d87815d391290ba33c74c0185da3794e

          SHA1

          f4a9344ac159def21b0e5d5f865185c021aefdb5

          SHA256

          8b6751c7928cc4637cd01946c9bff80dc4048ebf19eef46822c61cee850f49c1

          SHA512

          eee2af3bee88c94442b5e1346ba2e9035334f389375bc8b2ed962bd76707591921d53b93c3af1481ae7bcc8736f861caf075ef697cd88b81a931e2e76282b126