Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 22:55

General

  • Target

    1aeb2c4057618b90b0dca8a21ff73fe0N.pdf

  • Size

    753KB

  • MD5

    1aeb2c4057618b90b0dca8a21ff73fe0

  • SHA1

    631f968bc5bbac5652a1df2c1177e7d4e0566c3a

  • SHA256

    06ff721d88b78e35b523319ceac70927504fe63066c9cc36a5b54e83de5cc336

  • SHA512

    f59791d55edca81f49afb403f854af43327dd72326bae92bcd457540635aacdefbe6300bc11807c6b24e565227cde874fb4cd98b89d9a7a72ecf336bbb76a7fe

  • SSDEEP

    12288:OvLet2YpHhVi8T5seT+m88YDgs1613Yc7zV2CWKhfEv0Patk8dpWceuI:KLesYpPx5sZm8Xj8Vn7zVKK+tF8GI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1aeb2c4057618b90b0dca8a21ff73fe0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1b7d28675f3f8db5b77ab81be119e7ec

          SHA1

          7c76d9bc1bd3a0c3738bbb9b072af7c9358544d2

          SHA256

          766d60d21f475f620f93da7a1103b19d3f1351b7f13ddd296544750cace2d4c4

          SHA512

          dd4fc3884dd711d114a4f59e9a3b377cb6e004ee17ec3c1aaec5d9a0f9c768281f75623c0a3ddc7d10693fc5dce88e375c3f07e1a12fcf39cabd1a0a67e2fc28