Analysis

  • max time kernel
    199s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 06:10

General

  • Target

    42f37155c613662ed1f3b4cc35cc7c6c.pdf

  • Size

    89KB

  • MD5

    42f37155c613662ed1f3b4cc35cc7c6c

  • SHA1

    80af5710d8e060c5bd92a20579d647e601374a72

  • SHA256

    4959e1cf603109742eaaf3aa99d77ec66369c76358442aea34948124a9f550ee

  • SHA512

    2d5ef84d01e9b99109478f140feb0f01ba991113b2cda0c2502cd89718e2cfa5e45295c58dffc9872add28dc00a462fbcbd04e3c14650649f13a95bd45b19310

  • SSDEEP

    1536:sFRjhgWAn0dlfFAqiz/Yq8mKk9EipgRHIcQZWa87xz3TWApO6mxU:/ni9AR7Yq8mKkppgRH7QGtbi6H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42f37155c613662ed1f3b4cc35cc7c6c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0df735f33ff99c5398fb1d239e037824

    SHA1

    0880517d2ee6cf045372bbb91c0b0d703d059843

    SHA256

    e9f9b60b5c0884cef517813eaf933e06314e03c16de71f5abc27af276773686c

    SHA512

    3b732638aa9b77993929f4317f04aed7e8ea01c88d1c419635dfb94304e40e2559528f9bb035bc41db67368fcee8ca79561c4b41051a4aea5c47a0747d60253a