Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 17:46

General

  • Target

    Datum-Juny-2018-M7RSloS9XG.pdf

  • Size

    218KB

  • MD5

    99af9285f75ca2d0d01ee5371a1007a3

  • SHA1

    ba3fb7cf55f5fcbfdc1fa77dc4972f898703dbaf

  • SHA256

    a212e5ae16c8fd9cd2df6677aacb44aee18b2d6c671b94b0b5b1840757f38491

  • SHA512

    66df39863eaded3e276f6cf63fa08211935bba0448c5620546e9a94c28711baa6dadadff0be0481fd460c716fc5f644a78c0f56015ab1a03281f3a52adb478ca

  • SSDEEP

    3072:sM2K3pPA6Bb1vwHx1OEt/m2AqaOzCFb+fzvCVraVxnboZ7jyR8uwYCNp+iRyM0yy:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM0J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Datum-Juny-2018-M7RSloS9XG.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c10a43a7c8857a716bbe5f0f62a3c9b5

    SHA1

    e776c7d2d4808d7c23da7eb396022f74e64cc69a

    SHA256

    b67f4bd7c09627c07edc2525f8cada4fcb4acd15a7c64d82feb1a75a0b48175d

    SHA512

    ff8b47e2ffbf14833e95294b14cb11e5e984ed15154b6fbd5a2486571e3da699678fbde0db0581ec7958d1362164e8673d0d37bdecb4e4f44a17601b10b69862