Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 18:43

General

  • Target

    4429c667535ea51b36aa0707405af049.pdf

  • Size

    46KB

  • MD5

    4429c667535ea51b36aa0707405af049

  • SHA1

    083e523cd49ca2b482be9de9b40103f9ecc5fbdf

  • SHA256

    10c6dabff72f9fa82b6d2660e4b19c49c280cfd55ce40e12c3f1f73a9eeebe0d

  • SHA512

    d182aa7c113e78e04467567562c1770543ced915bfef6049fbfa8077818130021b6f6f55bdd6b31256087a6bddc665fff39b1db19f63f7bfb17c018bf4e4a009

  • SSDEEP

    768:+GnWuFtn7LExaqAJzp9hjF1k+yMqj3V/LnUkeLr5fiqBtLl9iOVuy8/U/kopMdFD:+qjLP7JzXhjF1k+zqj3V/LnUkeLrgqBq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4429c667535ea51b36aa0707405af049.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ed9e98b1d5bbd26a2b8f06c5ec6c76b9

    SHA1

    f4462910a715624e65a17ca41e996e77e40b107b

    SHA256

    554bf43369aa043af6d7680aa354cd78e164d61d6afe78a3dce8c442ae328e19

    SHA512

    9b65613514ac17df8bd21a632b0ce9d7f85b742bdbda812ff804d84eb3120887a98b0c5dd9771c3ad4f22856d0a0403955058fd330db372291b7ca191fe56e0c