Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 01:59

General

  • Target

    c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf

  • Size

    162KB

  • MD5

    d2ffd2c6bcdcd355358c42c2b4ec6c59

  • SHA1

    a26c261f6a5b78d625f14c92f183aad38d5e9a3a

  • SHA256

    c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e

  • SHA512

    25d9ece26985282d32869829c38e7c23acc7e9eed20905d0ca994510e9ee39c3cca0f29f51bcd6b6bc481a50ec9e5e1301c0082a7b0d0886ef76e409ce81f5ca

  • SSDEEP

    3072:Bf7P9ASPgM5VChclN1WZey7du/3VFpWx7g+Gu4ZIa1c9szFiYtZ:d1ASdO2W0y7dunkr/a1c9sBiyZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c391327920426977d5d81d4aafa4237cdacdfe84df44370e4233c8d717323a7e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    393d3242a9257702101d5a1b0327ffaf

    SHA1

    bead6ba4166f5faf6572a22a7e4792da4606de81

    SHA256

    a7f18d47d41d89392c615c74f887eda85651adc33c8b0266290bd1b2abbb9a7f

    SHA512

    055fb81b17951d17faab32cefb1619f5de6ea34d43c9e2142034782df4c1162db4e57ea316372c9174e585f28d4698cb59b1549b57b86070f0fd4fd1e04d4a33