Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 06:03

General

  • Target

    45797989329ecb1d3e22d03a14d6b840.pdf

  • Size

    69KB

  • MD5

    45797989329ecb1d3e22d03a14d6b840

  • SHA1

    f393188131a7ccf93b89a2ad6b886f0cd4d83556

  • SHA256

    4b5ffbfbc28599ac1bbd7ba7d51b23d435866473ce6df590c3e54f1e48e51963

  • SHA512

    4c94ec7be7066ecd868e3b91b3239c6f8acfefd117140baeaabd820c50a9f2b9b901af962ccdb57870f0df9a67319b6617b80c4b210b12b26e527b50a4158de5

  • SSDEEP

    1536:6G47U73Zw/8pN5jYdY6Cg1LOL8qWj42S8SRfNSrSsYyqAu/h:EU3xOY6JVOgqWE2SDfNzWqAI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45797989329ecb1d3e22d03a14d6b840.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    40ae7d4d43de0bd0664d783058f8e903

    SHA1

    ee8267d52ccdd9b015d9d1390ab258afaededc7d

    SHA256

    a55bb1de1bebee6bc941741894287392ea2b7b0c840dad60c0eced24147e7eeb

    SHA512

    1c34cb499c8817c003191c178c95a8d702a0a192f3b1c7ac9d488c3aebae168ef66e0a7413e12c649752d1c5bea3e87d0668875bd3a742bdcb69091f541b8b05