Analysis

  • max time kernel
    96s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 13:22

General

  • Target

    cb3ab680790651ed9922ec7cee07e9d0N.pdf

  • Size

    86KB

  • MD5

    cb3ab680790651ed9922ec7cee07e9d0

  • SHA1

    410875408af3f351d479e0845ae3ed9fd8cab940

  • SHA256

    48b2a2be8d6a0020ce30ad4694a161cfdc812e774703a711f2c1122dc2a50333

  • SHA512

    72019173d94486efd7d4e5932146e9a1ceee1ef26f6283a474e151711b5f7bec157971803078c86fcab279c17d0a0678ecf3b64f2822eb9467d9666bdcaff1c1

  • SSDEEP

    1536:/5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBrh3UyIBQMl139jAVuaWxzvGSEYXkKn:heOcJGORh8SrTyQFirRGp98VZYEckKn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb3ab680790651ed9922ec7cee07e9d0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2796

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ca9523ff277914ad01dd14d4fe34a2ee

          SHA1

          63cdab884a091aa7e6de28dfe6ebf872ae088795

          SHA256

          677ba5425ff5f76973a455793ff366fd884a3561a145243feb5051992f884cae

          SHA512

          90ec647e36a7bab8311df8e72ae9c0077c3d01c706cfcb97607ec9d8caa9fe3b93536afca72052297c3f43a7e70bb69cdb4c917dcedbaac0d450fc8c38cb3620