Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 13:20

General

  • Target

    Datum-Juny-2025-viSvk2EpnD.pdf

  • Size

    218KB

  • MD5

    732d1ef8a3bf5d850f954a91bdc5c4f3

  • SHA1

    3bdcb7e89a3388a57d5d9b8b6e5224ee93f633a6

  • SHA256

    55f82c2c2880288605898f53ecca321d713ae6c2ba98ea2dcd4f39438f14ca0f

  • SHA512

    7d6d90c51cb85a813cafc61250fdac77daeef3976b0bc5d35616d5a8ad8a3fe77ef53c91b0170e46e173707aa6f5b8e56c25201b7b504f54a8ad9a1d5b7766eb

  • SSDEEP

    3072:sM2K3pPA6Bb1vwHx1OEt/m2AqaOzCFb+fzvCVraVxnboZ7jyR8uwYCNp+iRyM0yJ:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM06

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Datum-Juny-2025-viSvk2EpnD.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f61657fd1cf71e8c3c1b6d12bed5698d

    SHA1

    197c1b32a61bde11ad74c59a0bfd0cd3ff72cf50

    SHA256

    39a7ea2d14faac5a5f7992cf429648fcfbd080d436bc48ef8c14c4049352550d

    SHA512

    b7346b86ef209fa4bf1493aaebc263a8de38e6daea923ad5225d575e13e26d95b054e5c7caca1987d355c1717d4081a6bd864b3b9fc603709edf5acf1118af4f