Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 18:42

General

  • Target

    4428e25a2797bd13afb82eb0b7fe856a.pdf

  • Size

    86KB

  • MD5

    4428e25a2797bd13afb82eb0b7fe856a

  • SHA1

    756d91ef8426cd94c2d1078ee5be34216bd9c845

  • SHA256

    80ba56d16bfc7650b54a3da78c32fde46b5227b2108bcf0cc33152656ea302eb

  • SHA512

    d14e239553cea7eb9617053f747114a8a18d7a12158b3ca16ff5827b6127fe766b99ba05a7c3c986aedc369f91cb8bf3195f09bfe71f211c50018b5733543b64

  • SSDEEP

    1536:xNKHZV1x4/VrcDzxIUzeFvEuByhUfTNBlaPzlwoUkGrj4hldKWYpO2+WygRlIVE8:eHn1O/VrcPxIUgtTHludUbQBB2o4IV9z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4428e25a2797bd13afb82eb0b7fe856a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bedfdb78e810096fbae61193a3e2f7fb

          SHA1

          8334e611ef8588160a6e16378f9bd10be6d123ae

          SHA256

          25aded5b464dc2ca9542594c507a05e0aa70f2682603bcf41c5f93f9c488c84d

          SHA512

          a04a2f890ca6c13de3dce686c1ead3d2a93167a13f7095bdf33391b6af074128586b92083a61ad59aa38549cafb2dea75eb448540310b5aa8600e95ed5adf35f