Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 17:07

General

  • Target

    ee930f0c79cfaeae52d6d918c05e3620N.pdf

  • Size

    13KB

  • MD5

    ee930f0c79cfaeae52d6d918c05e3620

  • SHA1

    e39a3ebb980d55a1ea15b823ec1cbbf9c2b4d593

  • SHA256

    c2023876c1a177781ccfccdb1552d7f88ce6201e14813440b848897a43af7ed9

  • SHA512

    f64bffbc9856abf9465d64410940d07bd4f89ffc1954cb95e590679c3f22049e48a6fc416a447d968543137e74df9241acd6bb13c9d1ddb6b21d85ed75312464

  • SSDEEP

    384:6oGguofJShiYHguQ3A4RHq+0+IXoLz3JtU0sNUGyPlPSzwxZ:6RohShiYHguQ3A4RH6RXoP5tU0slyPlb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ee930f0c79cfaeae52d6d918c05e3620N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5447c5869e8efa76f5893089c67a91c7

          SHA1

          8604786daf1a6e552af964d1fdf46814706cd8ea

          SHA256

          da8b2aaebfeb77b9d327e348ebba211567c9b91a0cfe7e400beaef1a5743dd6b

          SHA512

          d714186d742644ce778860b3af9a7ff0ddd3b7a9eabe811fb35b3b629ffde3f8e69aa57424c352187dbc0101496c39025546d10beaf7a40804af909ae7b58b65