Analysis

  • max time kernel
    118s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 19:37

General

  • Target

    47066f72357f61510cef729155c81cae.pdf

  • Size

    79KB

  • MD5

    47066f72357f61510cef729155c81cae

  • SHA1

    cb8f3e3ee15c56535d42b040c4b947c1a7f71e08

  • SHA256

    304c503b0c2c3b587a7a3525fc8057c733dc7ff53195c0eb6d6ceac138b88bb6

  • SHA512

    ae6414f1fdde831834422dd4d3f1e4203bff6b79ef19aaa39e455f9c2b13dfb788819ab01b2a6e191ee3b715e81620b06fe86b43aff2295df8cc737ba91dd6de

  • SSDEEP

    1536:ZaiZWojMA0gsVupzcNar6R8OG1FYHoo+bOxWd/IiXV4nNWOpOwrSg7fwSVR:MiZWSn6Vup4cr3OG1FYgbOwunqwrSmwW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47066f72357f61510cef729155c81cae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2408

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aabc63aedbc52cd3bc31725ad99fd9dc

          SHA1

          38327bde4b82b3c56e1fcaaad00d73bd1c563f48

          SHA256

          15d0d59e336536d8a1fd0da85e35c773de69cdbea45f6ccb3e6459db40214ca9

          SHA512

          eb6a62e66bcfc802b1bbabdbab2ae8d666e2c2f56059620070ce33b7e5ed2b03e0c5a36ec2ed8eab072986e7f135a3e4d8eeaa11ad001fad6127506ddefc4bcc