Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 17:42

General

  • Target

    440b1fe1c50e78200227897ebbcd5feb.pdf

  • Size

    115KB

  • MD5

    440b1fe1c50e78200227897ebbcd5feb

  • SHA1

    b1acb5bf497a609dacc743c69547801454197607

  • SHA256

    0fe3a874ff602871f9915d17c1e05e0884f603a7a37591874959f21ca7f931af

  • SHA512

    0db13a2e8666ee92db25d121df7938dc5681e069d7f6ce9217f96ff768b57594fd527fe4fd56a535f95e93743703ca6a9267a12f1320a700c69dcfc708af4d3c

  • SSDEEP

    1536:ED2LBb4QavKVaLu1yIGLwQnQs1VArw/wlY2sCiFRfT1K3MBdR4Vsz/7XuwWGgLfv:M2VrjVVEnN1dwlYjfe8ysD7XuegL/95

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\440b1fe1c50e78200227897ebbcd5feb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2312

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          051d6ccb9fbf19bc16b2d0aec902f93d

          SHA1

          68fa358026430ba84903c195627e9b4538d8daf1

          SHA256

          4b118773e14bff865788c5d803830907128c22cf0d2962f0c4cc26acfba360f5

          SHA512

          41f4417fb4c1f09bce67269cbb18dd29eec768362da025c57a17321d53f7a7d7c2cdf403c0acef043adc5db5f292cfcbae30d9eb11da3b1cea528b14cd83bf53