Analysis

  • max time kernel
    118s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 06:21

General

  • Target

    401eb4bfa8bb110b7c1efdcb1bd605fe.pdf

  • Size

    85KB

  • MD5

    401eb4bfa8bb110b7c1efdcb1bd605fe

  • SHA1

    29d9dc7e8016ab34f6bfe331b3a2cde03198bc03

  • SHA256

    4797da5d0c0528d7fdbb2cfad7c82807482c8c78fc833bafb7afc1398532c5d0

  • SHA512

    aafeb3978e703e81bf627fda1f47a9329dbc9b333ea7d4b9577d655b18d5724dc388933916d4a20fd6f504823f586f4248fe04df4f5094acc63613caaeb0c056

  • SSDEEP

    1536:vhQS9EZf8TliiXuUEuAk8eX93OH8d3mBFhaP2xwh/Rxtl7WypOlWWxzR4XYtemSA:+SyUMi+U/39k8a3aP2xoRxtlUlDzRbdX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\401eb4bfa8bb110b7c1efdcb1bd605fe.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          507e9eb46312698c22efa9266056e8c0

          SHA1

          6ca6e13dc8bfe8fe2b592d310492bde207e4d784

          SHA256

          b094a7b960e7a0f01197caa508469db1ab0ce6ca84945d1857397c6ee9a16758

          SHA512

          68e225db8eac1d9c5d20225294c79cab077948307a758d57397d1205668a26a3fd6665db17d9e556300713be693d008fbdd410985a71fc8c725fd3f990b7b901