Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 21:50

General

  • Target

    41fe9cf3df75b96b9ac31ab1b7cbb42f.pdf

  • Size

    31KB

  • MD5

    41fe9cf3df75b96b9ac31ab1b7cbb42f

  • SHA1

    79eea912f3e7ff071ae5896b33c32a1b92346f0f

  • SHA256

    94fed644be325c98e9065bb3ea72832bcdbc8c967364dbac09e8789eca0a9cc6

  • SHA512

    48802507a5027d3b2242cc76002ccc83baf16f00de496962039a2fb33ecee22c52373a1a8b2bbae79b36e07d911ebad261b9788f33156c54c17e36e6847025e5

  • SSDEEP

    768:rmu0txfcBI+NmXAFI2p78VPtN3sGeNngR2eqeCsMrkg:aV+oXAf78VPj3sjZNeCVkg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41fe9cf3df75b96b9ac31ab1b7cbb42f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f3a8437cc973d70f172ac1169a9f6b9e

    SHA1

    4c83dd959a07cd7b7f999aeb764cd2f7dca79290

    SHA256

    8276b929c13aa1862ac0042277882be31f899139ff42b0f8e83582a76e4764b7

    SHA512

    8fb5c664524118270791b852f5e5ed9c9aaab3bc41c7aae8872dd064cd29c2be16e8c92ae90c26b928467868190ec7ea4f6254f75f2d491c5695b0c18292a5c3