Analysis

  • max time kernel
    239s
  • max time network
    280s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 09:29

General

  • Target

    407f556583a58e82b9a188b4c1db21b1.pdf

  • Size

    81KB

  • MD5

    407f556583a58e82b9a188b4c1db21b1

  • SHA1

    c6878bc9fcfb31a26f2a5ca2ba61917619f46e92

  • SHA256

    16b4341d6870ff72727278a1f9b56976b776f399cbd45886fb1c0b32cc3a965c

  • SHA512

    f12ddb47619bde0138869fb1af6f42ee8fb5fc53a40253401fce680184edab7333feb7dd9baf759431945abf1bd7009031952703feeed6ebd0671c7255865be2

  • SSDEEP

    1536:9Gv8r2qOv6oIiBqiTrCwyeGDfNvafQyZAC0JyVboCjOH16YC:aSxoIi0Cue+FaoyeCuyVboCSH1w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\407f556583a58e82b9a188b4c1db21b1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    38159e39ff69beabeadad48710245272

    SHA1

    68bd6930cc059ba84df21dbc2a1fd85e370219ea

    SHA256

    7ec94b4d560c6fd28b030a2457375c152998397f9d2c67c6ff1b22760198b3c5

    SHA512

    8adc156e2805c2e3691a6fa96e43139217973003f3a5d71cf4bc6701269b1cca6c7e4054042c9d46d40db3f4c2d55d674305869b24b17af7417443d60e207484