Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 21:56

General

  • Target

    04f50b8b86b97766eae4504f9d08d13f.pdf

  • Size

    88KB

  • MD5

    04f50b8b86b97766eae4504f9d08d13f

  • SHA1

    8400e9a9c68d933559d49dcc496b24d12d356ff6

  • SHA256

    bc8794f18d4ab62ecbafdf99c1a331f5518e0c4c49edf208caf5434d1b65077a

  • SHA512

    45839c5e69eba8a63bc444a2ca550ce820b0a3694798a980a870d9a24d21ce69c13fe2e840c28212801d601aeac3fd14555b389eed48de8384c348db7f9b9273

  • SSDEEP

    1536:gFIZEfh319n15+7En0HAzP11Qi5HW0MpJg4zVZWCpOViIWUrHiqsVa6:wfhj15KE0sPv20M3zMViqlQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04f50b8b86b97766eae4504f9d08d13f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c10dab746103034865050af5a44fafd0

    SHA1

    14794baf9c49b7a3c0fe9b9d0222f5f3fbacb6ed

    SHA256

    eb8bfc52178bb701d95786c494e92b05118b14b58abaf56209803f7cd9d0eb68

    SHA512

    ce61a02ed0d6b3963a8c21db95e477153232d5902dc1375dfdb9d70e6477371b8d1f8496a134b8ec57a0aca179f0d638216f193edc66c5b80045073c4cffa5b4