Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 11:05

General

  • Target

    4384cbad0bbc1ec562a12772950a34b5.pdf

  • Size

    85KB

  • MD5

    4384cbad0bbc1ec562a12772950a34b5

  • SHA1

    6bb584a49b3fea82d6df2fc2498a09c97418719e

  • SHA256

    57ee79176f6b01ab9b6f183660598d313066300b426e24842e3b9c259d488bcc

  • SHA512

    eacdbe39785be83a3236a2f4f28e57565015748a08ecb83d91d9af5ee654a77f1297af50c2f076cfd09222dcffc03a103e711896b147f0473c6e5fb256b8caaa

  • SSDEEP

    1536:RZiCc7mmuyPSNb+CK5vrcGzUtVfZkLlsDApkCywZ2qhWxd/gZD5v1aijwc4vW8p+:SZmJh0VAtVfZkLlHptMqmd/a5v1aqN4m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4384cbad0bbc1ec562a12772950a34b5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    63f9ccc070561ac5c843106dd243bee2

    SHA1

    839995ce6d2a2a883e5258443ad7b5b2e08aa571

    SHA256

    c12f12554fb5549aeded09f88e0daf5e55347296e945a7ee33a43ab5c375d9d1

    SHA512

    18c13065217c53830f58bd400562f57cacd3c41702afc839a517809531876995bd153bad34436106484767728e3bc9451cad8f3c2f2112be42fad006847ac097