Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 00:43

General

  • Target

    44d845d80c648af124f866394847fe6a.pdf

  • Size

    88KB

  • MD5

    44d845d80c648af124f866394847fe6a

  • SHA1

    a8c1a38e406a2b61d22496966e34a45f5e6aef11

  • SHA256

    ca941ba74c6dcf70a390347c419b18c8d9bc21ee2eb8198c6ec1be993e729d43

  • SHA512

    d51ff965fe3f0dc394d4cfe1c38b92d3d3e9ce68596cfd89b23a6187ccab41bb4c3196f66e238ba063ce74b279d368ec900598155c3f3395270afbc6f4c16673

  • SSDEEP

    1536:TLHyI8uTwQD8Q6HZDc4GkG7t+c5MYEAyqSE+YmWrJyid3BXdl4RWapOtQKBjOXwx:9B/UZgn78lIyuGEzl4etQKBai

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44d845d80c648af124f866394847fe6a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          929ac5852bdfa110711d83358c483038

          SHA1

          2e804340f0872c6750d835c3f29d240743b43da1

          SHA256

          83e077ce04f94edf60cf4bd35646e6b93cd0793c1dd950b3a9077b3224aa2d7b

          SHA512

          c47161f3f4ab2e8cbd52f95709bdb4ed69a018c3285fc6c4a5ae8a7c7bf4e97ced616bd3a252babd2a5ddb66ecd0288e25b3db48a4ccb6885f2e50ec21050fbf