Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 17:24

General

  • Target

    46c8eb85085cd668e99e016b668a86ce.pdf

  • Size

    78KB

  • MD5

    46c8eb85085cd668e99e016b668a86ce

  • SHA1

    5554afc50e0d27bdb6eb6db1a11f42d38edea040

  • SHA256

    1cbb837b38352d293da5fce78cc83ccdd88388d3d0d6188661ad346a6b3e3abe

  • SHA512

    e73eaad02548da4ff76581b12239c6ec5b4448032d43b841bcb2fb1167cf70c5d7afad8e690096b2f7ac93821c4f8984882a8b9a7879a19d9622afa06f945a6c

  • SSDEEP

    1536:D7MfU/D5fpaR+XrkRRIN4z9kT+uze8A9eE3N2WepOypIlTX1WP3cTPB6S5ViS4:gM5ER6knINc9kTvz0n3dypIdX8ugSfiJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46c8eb85085cd668e99e016b668a86ce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f8b24919dcc95025c6acbf61b919a57a

    SHA1

    4a437ea7a38682e9d1e2307f6520242340cde56c

    SHA256

    82de530ebef35567d3e1b76eea911ea863e9d97506917b862c18785fa4784285

    SHA512

    bbd29d2cf46b5638e05521454e5e3cfc4c54c80004227cfa4c9e5effcd5f9c27e8afb1cecdfc6c822624774066330d33f8627f9f8411b5a92c757cfad926d1a6