Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 18:11

General

  • Target

    inv_12686649_71.pdf

  • Size

    147KB

  • MD5

    c90efb29ea0117416207a27f2a5da9e8

  • SHA1

    e36d566e1e9365b27af8cd053e3b7bbc48fe663b

  • SHA256

    cecf0e98b3838190b1f5a1ec146afe23d579b773d0c2572ed734e07491b50e5a

  • SHA512

    f5ac777f7d6e9f76b0d72686bc74ee4111c336441be961c2953d39f02ba1f4a48b9c661850fa3c2794400de42661acb904386b63ceac072dba1e212341996f84

  • SSDEEP

    1536:SsNeg79qAJwoG38YnuxDmR8WcR4tXR8aP3ixDjog0xQ0fzE4soXZsvDDi8l8RIax:hNelVo7xDSjmwR8WKD8gOzE4Gv/icaxX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\inv_12686649_71.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e469fd827d331c8a535b6345b180effb

    SHA1

    c2c59581931e6fb47850112ddc25d75f6cbfc661

    SHA256

    c64a1a3122dd9ec86d0cc8056b446ace1edb42d9cbb72091b9175fc5e0c49fca

    SHA512

    8335090ca76dfb6cb4a629848ab8dd8a15f728f780265cc606a50a9ee806232afaf822b301ef1a1dde10476508e8b2946b2cd1d333e2321f2ecf38d7171a0ab5