Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 12:50

General

  • Target

    490783f674925be66c47f26d7bd81cbc.pdf

  • Size

    89KB

  • MD5

    490783f674925be66c47f26d7bd81cbc

  • SHA1

    b108934ef7db3db2f8c9725fe29b1218a284aca2

  • SHA256

    5cf8452ed6ab84e6a6fd418ef888ed5cb6374c166da1ab70aefd816f9306f4a8

  • SHA512

    3605e7be43ac5c3a6faf5f2776328d912128d5317d41274b14032893cb6adcfe0eaa18800c338ca0d138ffac7bb955e539f16365cf40c6dfd26235f2e202cad4

  • SSDEEP

    1536:VRX1JXdqqSiP0I5vWMQYCcfMH9Okqq0WJa5VVIgCpMAd4JVlyWOpOwrKWnvZxOM7:nXPdsiB5vdQ4EH9OkqVWJa3qgSMLRnwp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\490783f674925be66c47f26d7bd81cbc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          47abd729cc204d06f811b3e0042b4f8e

          SHA1

          a023b18d67c21841fd523ccc8fd5b7ab925492e5

          SHA256

          f0fab423961c62e9c5f3a67329be59f60e9491f6dfdb66cecc50a74f79d2775a

          SHA512

          fba8a0c4bc3d530addea13f2b5aa0d950d87a9139a653a7cddbb50d0949cc5fb1fb3a93220b6ad3495a053c93f4ab76004223000dc070a3bc2c12d43c1955309