Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 01:32

General

  • Target

    32f3ea2558c63b3a5f346e10782d4800N.pdf

  • Size

    91KB

  • MD5

    32f3ea2558c63b3a5f346e10782d4800

  • SHA1

    a6963f3aa449a35c4a9e2e861f1f33096be34306

  • SHA256

    5fc43cc593c6763a447e5360924429e4e87f8b1082d1117d87f5fae08ecabcaf

  • SHA512

    b866eb9d843595fa8374d646581fa4d59c4f142950e1e47ca1c17331a108f3de04a9645581f60ca71216e0366dbc57dcf081f79b11975d1ae2dc36eac0568b07

  • SSDEEP

    1536:zmkdg0i01HYRtZaGteS0KCruTmq0jhFd0sW8bnB1eofOnuvlPxdJGe4u:zPVYpYSFITLFesW2n7eofO4Z71

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32f3ea2558c63b3a5f346e10782d4800N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9b5f70207da393e344c04b944b1c6908

    SHA1

    c641932da0c51ebbbe0736b77c114d036e801d2e

    SHA256

    8ed8d5bceb73bf1db85fc5a9d78dd7df0b95453e615b991fc6c17d04a3c3bd85

    SHA512

    993e35cd785a30ed68453d10797b81b5c8f21cc7be29aecc2052ba08331170920c35eab16ae45c17bd09ee883561dcf540abacc38ebc885de537524dae3be5ed