Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 00:16

General

  • Target

    91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf

  • Size

    104KB

  • MD5

    2a154bdd51a323e148f2724fc3f5327e

  • SHA1

    435b153521b078a5223fe61d79408757fb69c395

  • SHA256

    91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c

  • SHA512

    6364d0a2359127bd7cc570735c7720952e1db034fad4e73eead43a0c7040dfb6634b94ebe9e3bad75f70e5626975c597dfe4875a743d251a9ff5d1709a1d45d1

  • SSDEEP

    3072:DeOcJGORh8SrTyQFi/LYRH0kNBXBPZC6y5kQgs:DeaORh8EGQFKLK0eJBPZu51l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f41ed25d85c2ede4135cba14ec6a5c86

          SHA1

          a189c5b26ee6e4cfee948337d631bbe2599ed48a

          SHA256

          0caf9fd9427ad065e0f283b3b8a3cb6051ef2c51d8bd5c0df8176bb5103a431b

          SHA512

          947c7a99d9f2c7a35e48f89666336fc2e8177f9330c16141818cfbc76022b912601384f7433d266d281248713646ca8506e08cf749242bebe0138f1bbd850089