Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 21:51

General

  • Target

    28d507884cd7f72b2398308a6223a2b0N.pdf

  • Size

    252KB

  • MD5

    28d507884cd7f72b2398308a6223a2b0

  • SHA1

    c5d83011551220e364e0189ae52b91d3932e6ab0

  • SHA256

    86df238ccdbd08b4d2fa4bcd6f84caa8bfa88422e21baeb1b5ebadc24d248365

  • SHA512

    2b20f24e457f2eb63a847e5ab452cde24cd3dc66b0f1371b806f7556661d787c00b96259d6c2dc3a671a24083856b4069bebc8cd9392b285291b1912543bb286

  • SSDEEP

    6144:Eq41WNbkqegW6fLxVsFFFFFFFp3PNtaiEUT0JYhghbLHjfzG0W:Eapj1r8FFFFFFFp3PLaiEUgOhSvfzBW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28d507884cd7f72b2398308a6223a2b0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3e62aa6b7d880b6a08f4a0f8aa754e83

    SHA1

    b9900fb9440921f5192bbd80b46547ad09704474

    SHA256

    31c0b8bdff41e8e6d7ce8cc5ab8743c8ae8be2d52a5fd233ee1579c58ea44680

    SHA512

    f7f9a3ccf1bfb5d496c30d3e4cebf8f366feacb55de8adb22f253a65eeae87fcfb5edd962bd30eb6b502396f056d3010bf093d150b381bc128fc24621c66629f