Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 18:53

General

  • Target

    008ee3d3ed54ebd081ac01d2cdbfce80N.pdf

  • Size

    40KB

  • MD5

    008ee3d3ed54ebd081ac01d2cdbfce80

  • SHA1

    a12f71b4feb09f93068d7b7ea84ede07eb3517bd

  • SHA256

    e024d3fee869804846daabe3740ada3760eb35f826f87af37f4ee48232e1ea9a

  • SHA512

    6897bfb875c03e4f1faa58d7ab29f4d1d70d2eba255c0765b0e6f16e5272bccae6a48aeb4557c720926919ff1632b14c0f57c99557617b9d6d8ec8dcf8cd036c

  • SSDEEP

    768:SqVudf0bR+SczhZPIZNkaCDuI3kIr2UqkiH7HRuX6Xu+0ojRo8RlR:KEOjhu/IrCf66X9W8DR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\008ee3d3ed54ebd081ac01d2cdbfce80N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6f9d8e761051c4344034e45bfd4915b3

    SHA1

    0909103626cfe16a1bad33aea2789e4add4be2ad

    SHA256

    459b4221bf3741c3d3b035d336402ac89cf0e03a77005b399c91ebffdf9c0b0a

    SHA512

    e1adcceb5f36638db527e6209c97140e3c204c507de739a50e116f3d3f5bd02f93adeb23dd9567a931da0eb9dcf9ae7978a00f40bcc9c08f64c01d6b0b7a4578