Analysis

  • max time kernel
    171s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 16:28

General

  • Target

    41593b99b70c4f8631c85d2364af7903.pdf

  • Size

    48KB

  • MD5

    41593b99b70c4f8631c85d2364af7903

  • SHA1

    adc8b23f6ea22952d48593c54c2fc438615f95ce

  • SHA256

    549a739cfbc172c81566c3c83d558ba248e037f5b9631cb8dd19ce07e0252fd0

  • SHA512

    fb2d9984675ae97f2be6cfc1535de69141562ce0f8dfaec3d7140df91406a00249f2d36982c6273c2ed12d99a918b1bb4b2bdd5384c6a4b8aff9d92764b9c043

  • SSDEEP

    768:4SMEZ4xYaGKW8yFwk7CGmOu3HpMB7JZRI5Jv4NaIXY07FAQS2sI:y698yyLNMJJ3+4a8Y0xUdI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41593b99b70c4f8631c85d2364af7903.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b04fdb88cb5e8a495a44887d9c14868c

          SHA1

          5d141c5fb855590f458a7695d6280e78ad12c1ba

          SHA256

          ed1afcb9ed6673c9365d02124db59d0fdef575bc283632bec472b03f66f64ea2

          SHA512

          9f7e5dce544d7fb1a58eaaaf4bc84e829fe6803ebde20ab79c6ad34c45d21d0243172666b5e2152153683b617948fcc231188243f9be23b939c5a57ec49ad1dd