Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:01

General

  • Target

    b4df0912bfdc0f83cfdfce4929977b3d.pdf

  • Size

    35KB

  • MD5

    b4df0912bfdc0f83cfdfce4929977b3d

  • SHA1

    fa152103e9246562dce2f012a3b8da98d2f81fcf

  • SHA256

    7421ba1ad2e1ed993c3903f404ce9f20e4f1e9513ce3ebf342dc59337903d8a9

  • SHA512

    f182c114c47de1c5e431380caf25af7cea77c68e30a54c213db00f307aa87a32669ad05287791dace9d3ede98cc6ffff79f1375b8feb0110e229237449af1086

  • SSDEEP

    384:h+Yq3W7sdD94sTbJ9gDVTcdOIIVKP/mG6XuRknru9Ft4CUSjTK2iaxvBpVV1aI7z:h24sKsx99ZIY/mG6eRBn6H+CIEW12cv3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b4df0912bfdc0f83cfdfce4929977b3d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2d3875ab1c99d3e00fb5ac38331a370d

          SHA1

          2f79c1bcf7ef3aae1ad646f84eb0b4c8a54728dc

          SHA256

          5b96549fd9ddc0d9f6e960d873611f09c3e336ac495c08b931d5192f30eb4ee8

          SHA512

          611d0f4c4f943d017b85a3606f01768621fe689c3e9cc22cc4060b778e4c0f14df27badb78adcf60543e8421fc2e84f0b9efdd80532ec4551fc52a1e2ba1b4d4