Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 14:38

General

  • Target

    411ff23a898f91655973e59d099af8bb.pdf

  • Size

    90KB

  • MD5

    411ff23a898f91655973e59d099af8bb

  • SHA1

    a8a2c98201871ba4d15a0a622a3325c3fc930663

  • SHA256

    04039b27924c55aaa2c618957c4a67489c714b734f86e865f1e3f9a4a3be39dd

  • SHA512

    27e1861f50eacd25553e9753f6277bda668b8d0bae0563cc00dd92e4e68136e32e12d918a76372ef3d20cfb5173470cf604d8b4e543d4c7f4da354d65fe7bc63

  • SSDEEP

    1536:Kfd4PyUQbKEBAyjDleU73HDZN5Mj0bDrbByKLHfEr1bWGpOKCWsA0jUrfNFmA4JN:UdmyUMXAyjDlegHDZn7nrb0MouKCUz7e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\411ff23a898f91655973e59d099af8bb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3016f197c4e317cbfc80afd9e6ade8a6

          SHA1

          3e29efd40b14691c7357e47ba492c100739141ea

          SHA256

          d9e400c87d5f2990b616f38eefaeacc5921ab511dd0ab115cce0b3428c5c79e9

          SHA512

          c21bce2a454c530fc98bf7ed9db30dcff216304c2c5df9081da0557aec4c73eed8fb171f49bc83a9eab50ec43e0e9175b9527181f98cb711eea653fc781781f2