Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 19:48

General

  • Target

    470b7ec7b3856f9c25b05f651c743304.pdf

  • Size

    46KB

  • MD5

    470b7ec7b3856f9c25b05f651c743304

  • SHA1

    72a4941bbaaff0c5e25fabe5f5c5a08a429d405c

  • SHA256

    7de12819df9b6101feda561f0f86e207b15b2b4578136ad767b48618e6cafc73

  • SHA512

    c23efcec2f26281a81941aab30182dc6418854d21deffd099d131e2c7550051dce6e9134c83944dea6c8737291dc2ec2a5a9275f71c5350f6fbde69b098d7b3f

  • SSDEEP

    768:qNH578FmW5/ZZhJ5xfiJst22k86m1TlR82a5Z+HMwvPDKmRAl:qZS3/7H5YP2ko1TlGr4HMwnDKmyl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\470b7ec7b3856f9c25b05f651c743304.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8040a0f05161d390f7e4f6997f48ca7c

    SHA1

    8b0d2448109435b9271133c0fb8de77228791086

    SHA256

    825d2ab99100d8bf0aa543c8bfcc14e9d509e3d9436d955e8d98451d61c25001

    SHA512

    440085ec05d8f6a8f384694be71ec9325af6065431a87b15a4dc867a6ca7d67d4775bdfd7a529a005de6217774c18d00da71fd1b7e328a82112adc12fc0c5b17