Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 12:47

General

  • Target

    49064b16d462af2766c02a938234d552.pdf

  • Size

    84KB

  • MD5

    49064b16d462af2766c02a938234d552

  • SHA1

    30c238f3a90c72924f8be6c82ef3fcb2fb7c9738

  • SHA256

    a9cda8864f12ad8f03576c97ae198122ab33c53f6561f5f9ac49331cd18f43a4

  • SHA512

    89b3cb283d94081c33e6fdbc8fd780a7daf05cc29c1e85c98e6eb0f5f696902bfe0a9bf261b33917c3ff7856da98880a953a52340437e8946ade0d546650c672

  • SSDEEP

    1536:5Lv4V3zmn5Z6qqK7E3G9bC783/ot0qrOkTFCW8pOGGL2IWqdzRDdg+v/1v:hv4Vjm5Z6qdEL783gt+kB5GGL26dz9dt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49064b16d462af2766c02a938234d552.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1db01043b0a44d8737b6e45b48d614bc

          SHA1

          8c6940f6d94c4e4f157d453469a208ab2b3a64da

          SHA256

          23f2cb3e7ee43a3e9610d6a60accffbbb602396d2b142fcf8eaa51d62535400d

          SHA512

          1dc861d64ceed1c176eae8d6eb403e643cbdf0c8136391a01d6c5e1356650a8fe52cb814ddea8a201fbcc113080c84558eac3a644eb0448e0c6c03c932d3bfc7