Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 02:06

General

  • Target

    03fa0275a2049527d3069c03dd45424d.pdf

  • Size

    9KB

  • MD5

    03fa0275a2049527d3069c03dd45424d

  • SHA1

    d275c170d2b3b4527c30e265fc054a44c3c8bbe4

  • SHA256

    a07ea0ace292915a61d48ef9544cc052c7c688ac0d596126720790292332ca4a

  • SHA512

    980d19d62ffa874bdf5328382155c211b9f0236250af0a87e1f40f4aacf069e946df18873c6d96bb2eed275f3acd200acdd13527c287b2d5e6cf28218ea680f6

  • SSDEEP

    192:TDPz4ULMxLIKXHsfyxdSO7qmVKgudt4dcKCFdiu/qQTIle4SvK00UmQLeTVYFBIL:3Pz4ULMxLIKXHsfCdSkBCF9T94wJ0FQa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03fa0275a2049527d3069c03dd45424d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    190f681f8c7dbf07fe99622b51085b4d

    SHA1

    fdc47cbc4edd6b6d8c3b808120456a7aad993a68

    SHA256

    593f760e34d25888db9264666fb94266a15e0b0aec083ba51d7a4f75120c382d

    SHA512

    6c6e46a9de86615c0037917de52f6e9a13162b4d23a94675be2f8604c2a8d8d2c6e9ccbe19e6dfc9bc081f40f146bcb1f69bbfb84181961ec4f6ce2ec0e331e0

  • memory/1252-0-0x0000000002D50000-0x0000000002DC6000-memory.dmp

    Filesize

    472KB