Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 00:15

General

  • Target

    4247b3674332bce39467047f90332042.pdf

  • Size

    95KB

  • MD5

    4247b3674332bce39467047f90332042

  • SHA1

    bd691484491111c49cc9b74fb545a6621ba38266

  • SHA256

    17c19b65710340881dee23acebefdb50f1e362a3dd0ac6433029e4f7baeb8d6f

  • SHA512

    02099dc2d1ff16758c7d94a811583ad4c29b6211e56e08a8aefa5be520ffe3ad12d3bfd2b902bec9cd6cfeeb87ed33f522d44059eabc975671f6a51d45fde92c

  • SSDEEP

    1536:5Lz7NTcKD5Q3MB1P87n6mfzip4EjynLA1OUsc9E8S5MUc+YzW0vj04n5lOco4LJl:heioMB27n6bp4E2nE/scAc+YrjhvOD4X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4247b3674332bce39467047f90332042.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d3acf6d620e8896414b11a9b93d99236

    SHA1

    7488051a10e2d20720f021eeb22648fe3e96314a

    SHA256

    950542162c8c0bdf0ca381c59347dd24e233a130eb34a4eb3e4ab43c6ee4ccee

    SHA512

    d8dfff58019bace3d2495f0db15cbcf1f7cd0d65282652ab2d1d4c283fd1d4fb3a9e1ded124e69cac4486ea74517cd927931270f6fcc399dfa81d098cc5738a8