Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 16:14

General

  • Target

    lessons/Lesson 1 - MatDeck document.pdf

  • Size

    93KB

  • MD5

    4ec2d06d74d22936bff23bf464830109

  • SHA1

    06d176a6a604bcb7187ac578beea4023737b37bd

  • SHA256

    e147fc95c35b42557b9982cf6a9bc339352031d7ece27f5b72317984c9bdc16c

  • SHA512

    e8bd3c10d874a7c4f753eba20329051e76ac9517663bc0191123f3e6e568a948ee9e20d9af1c6e54921c7c68033914e485308cc49ba48da961f984754cfe0cf9

  • SSDEEP

    1536:WiTFSrNNTTTTZTO7w/X+DBsu9PLLLpWaxj+bq9eBjN/jtLCYTZRlLiPs9HQgemmF:TAByi+lsu9PLLLzKj1jtuMZR1Jigem3+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\lessons\Lesson 1 - MatDeck document.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f40251872e69d9103035a1654ab246d2

    SHA1

    8c35b2059e3655004a8a624e40a3dad8ecfd56a9

    SHA256

    9ac3b49a70dbee17c23285ec9f37718870e9ebca7bdb4378f0ef93b579738826

    SHA512

    3d3306b942d5b47b9ea799d0a39d9bfa7fa4f9e84f2434c07f6d26357e033d7adfe38966480c31d8a1f8e274a7d7369e7433b22c14ed58565222aede895adada