Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 03:45

General

  • Target

    e31edca3d970ce66fda978ad69e1cc993c510a41262acfc31692b766f8660ac4.pdf

  • Size

    362KB

  • MD5

    573efeb0bf5f491dadec9c024df17346

  • SHA1

    3cd8d49edd9adaa3cf51bf54b9d38b428e71cffc

  • SHA256

    e31edca3d970ce66fda978ad69e1cc993c510a41262acfc31692b766f8660ac4

  • SHA512

    9f1d50041687c84c439e8d1ebed05684ba7fa4a11c8acf308b472660fbcb0ee334a76bf51c895a08a71b7ac69f8b64d98506e6d8203d698d95c0c70e079ca27c

  • SSDEEP

    6144:1Db5sSLdc+eOnzMhH6BX9Hugoi0Im9V7wARP0K/+c6WpflsLwJNU+QoUz8ynl0WW:13ySm+eyzOgoD9V7z0KT6WRlsLwJ65Hu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e31edca3d970ce66fda978ad69e1cc993c510a41262acfc31692b766f8660ac4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          43feb485992c3e098917e08349c32872

          SHA1

          a3bc08ab2f75c334c70a29ee6c6c1f527f0bc1fc

          SHA256

          18c6cc13522e61d03883f9b7a351e246dfb8f655e6c51da0f8f784c741b7583c

          SHA512

          61b6e4216358e5e7adfb57b362f9179c797762d7150d5e32a8dc8b2804e0526cc761fac5b0695d4222f77478028977317c8423384b120523654fb66c0ef0d414