Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 13:09

General

  • Target

    40f221b5086c79af6114f408b50a9dcf.pdf

  • Size

    94KB

  • MD5

    40f221b5086c79af6114f408b50a9dcf

  • SHA1

    edbd33fa2ab2cd9cd20d293e91fb2c98a18cd4ad

  • SHA256

    071c774b12f6f7e0d9a5a527021c03462c1b2532e525e64d666e853142569a6c

  • SHA512

    1099f9adfa6b480e4bee715058cfc161f22b2b04e6d890681e9864e414a5bccd436394aa5a4631f0975744f81906f63ee95903bbd50d31f469376be0072e907c

  • SSDEEP

    1536:omgZi6ZJwHmi656zC/j60Eo+uZjMClWAoMZdWoVPv/ttWObWUpO7Kw5:XdUwkn60Eo+u/lWjKt/7WOu7B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40f221b5086c79af6114f408b50a9dcf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0840b5f927e675b43641891b10c725c6

    SHA1

    41aff509b9c1f57a31e3aa3019a311f8c61a11b2

    SHA256

    b8cf5ab60aed72207f60beb1d96ffa5d185bb45258cac607a10e8d5fbbaf10b1

    SHA512

    5cc8e0354860882894565f264648cdb2030691a9431f5bcb538972fe8e729f8f267cf0b1095f41b7ad5879486320a079e048f02e37f8a7da11082f042d14b586