Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 18:52

General

  • Target

    41a582cd6574971f092d074b76a96b4d.pdf

  • Size

    81KB

  • MD5

    41a582cd6574971f092d074b76a96b4d

  • SHA1

    124432657d794f1179a5dd05d2f621264f211872

  • SHA256

    3403f43685eb4f7677d1d18cea9c35dfb3d9249b4fef90d3b18b7ce4286d7ed2

  • SHA512

    11a2c7d488f9db0db2c4c28839a4fd54e0ba90e57576f939070d044b153cca0e55d7796489a85b0d724d7ba05a1f18d618b12dc9827ae8906c45fa40ac6439c3

  • SSDEEP

    1536:RBUQlvlx1jAsyquBEgeZNZCnFLQ3KzndI4fJBSXsWGpOKZB4Z+dWMrbK9MDb4:fUQXx1xuCgUNyJQendI4fX6RKZBY+vry

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41a582cd6574971f092d074b76a96b4d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b37932931cdfb1dcaa904d212fd0c0c2

    SHA1

    2ae122656666cc7dd16f36b3cb72bf95a12b9b28

    SHA256

    c6099e5da0c3f638cf9f044ae5cddc4d4fa2e84556f10ade85e30a4e2c222dda

    SHA512

    9b88adc2224b9416724ba2e53be372ddcb6b926787e7585f3c951ffb9df5a5b573a17fd112302909ea88de8f4f3382f56b8d3d2d61224a800883087a7fbf6b37