Analysis

  • max time kernel
    151s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 12:07

General

  • Target

    IDAutomation.com HC39M Code 39 Barcode/IDAutomation Free Code 39 Font Manual.pdf

  • Size

    238KB

  • MD5

    557f7451b09aa0b7a3e4dad5e330bf21

  • SHA1

    18f474198e43c4edb5dc6dfa5d1c50d30ae213fd

  • SHA256

    5a022c8f5b6d89f8a655152dfd0d1f417fd8a44e637dd4d1403dc9f1f5990bcc

  • SHA512

    9f9fba830b4e13fde3cd7cba607b5e8b0f7f741cabe7d0cb5ef8480423b53e9c8709df96fbd971e9755415a6102a1cf7d63eb7aec725332a580dfeff99c7fd41

  • SSDEEP

    6144:5OUY5V0oCtpwVPfGNxOgPgULyRbno1xybGwp0A4m1r:5oV0o+puIOgv0oHy6wD/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\IDAutomation.com HC39M Code 39 Barcode\IDAutomation Free Code 39 Font Manual.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    42e53e36c8e26c9ee103d67dfa55827c

    SHA1

    7267a1977e075e1a9e5b8280d3c32c5a26572413

    SHA256

    042d24408bfa45d8cbfe3ab4fe308d812c968068b194fb01b1dfde53e87ed0e8

    SHA512

    99064ff70c813a2e7b430f11f29e5e3d0f36a64629b97fd1173aba1571f893350a5e9871e207069725d6a3e85f71babff1b168cbee387987b1ff33fb7f090396