Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 16:14

General

  • Target

    lessons/Lesson 9 - 3D graph.pdf

  • Size

    175KB

  • MD5

    69b5f43756435fbdf6b43befee332444

  • SHA1

    efc3ac6191de53b8ee6f610704f1b94fc917c306

  • SHA256

    b557018669d0b2d685d202410dbb73ddfdc5948799a4a17005871296d4dac067

  • SHA512

    38fe5808859c32d772332a09dd3b209e479b63c6004ad6113bda94394bf141c734bf7e36751cdc55d34608a8f2c1d8679185a693b8f83ad723879ea885202ed3

  • SSDEEP

    3072:sxm9GX6LmA/0IEF1TJqkasELieS3GkeEKP6YbnHutZqAsCYmI8R:0oc8i1T3fVGJEKCQOtR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\lessons\Lesson 9 - 3D graph.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9a9b166b1991ab41c13c06e1a910665a

    SHA1

    1f722304d82492eb89ee350f3df95bb44c30ef2e

    SHA256

    e2bfb0145478cd2c53ea63400316b9ff410dc121232c5ab135c0a07331023907

    SHA512

    7a93f7c6550963c19aa66560026dfd1806ccfdb985ba532ad3b9d72921872ef24150902d408af778bcfc7aae12b61a80163f55369d20aefb1c6a8a570e8a00cb