Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 15:29

General

  • Target

    Scan-2024-06-27-16-28-49-894-10769.pdf

  • Size

    1.5MB

  • MD5

    c6498f8068a4fb287e4cc71f25b920f3

  • SHA1

    7f21aa2e7bce44733647ef575cf860eb7f9295bc

  • SHA256

    4eaecce84c2370460f7bff9f6055ce4a100f4cf4c2462c092d2fdfc7749ab719

  • SHA512

    5e579e71b4067fe5c09d8c3abf596b4ebb0759efd1b93dc98eb9ca99fbdac456bce3f073b18695a1371bdebdef79a8277850405dd2b792e94cbaa6b520acebbf

  • SSDEEP

    24576:af87wIyQN9zvwWxjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AM4IyRl5DUO:hwK/bwWpo/Y7wjgTm0PxAwJHE6hbyRlx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Scan-2024-06-27-16-28-49-894-10769.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7b000abccae0ce8a1c2982afc6b670ed

    SHA1

    8d42289e9c03ac140e44db47942f342f92c4581f

    SHA256

    8735c5bd169347043cbc770dd9944406af98c09a26017cf66636ac087123718c

    SHA512

    542597063254c192f34e9d3aedd51c45bf4436b0e38cee39e0d0fb91e00b486c71e5d6da0177687c29646c1797336a95c2520b8ad6d0b6478eba033f6d5767da