Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 19:07

General

  • Target

    44367fb92b409929507cb4df4fdc11fd.pdf

  • Size

    66KB

  • MD5

    44367fb92b409929507cb4df4fdc11fd

  • SHA1

    5aa882ba7eb220eda028606415f83622192c0a70

  • SHA256

    3c84694cdf1e29f35f36a2c00f6c5b816c79b4eeacb8363c76ccc08c8b24130f

  • SHA512

    d2426a19fbddfcba3a582132692725e3eec3caf75fb15348bf6847d111b1540bfa8a02588515b7c0315d926b65ac83f27148fb7cc5ffed61f404992b5bc7f6ae

  • SSDEEP

    1536:GI6iS47AMk8u8uJLhvfdA0BlIUEJEBSmnkhBu5X7:1ZSek8Xuhh3dA0BlVBSmn6uF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44367fb92b409929507cb4df4fdc11fd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fc734b6889410941a42bdaf856ac647c

    SHA1

    c2a2816baac96af992d033f8fe67129af79ef201

    SHA256

    4f635aa86d8a96877b68ca89c7e044ac2fa57fdeca36708a08bb8a6578594064

    SHA512

    35a5b898a1d66f7258b592d4e186424ff9c34157bb5c48e698fef32e5c86d180753c560e6298d6a6dbc49229ab20fe335abd8577494c3cad9b1b7044dd4ab3a5