Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 15:13

General

  • Target

    49531573467b307eaf7d087fd8e47675.pdf

  • Size

    35KB

  • MD5

    49531573467b307eaf7d087fd8e47675

  • SHA1

    62f6f9e24ddbf5139b0f2082f1006283d7463633

  • SHA256

    d6cc9950bdd38eee7d27edf100ff8763c2458320b96eb055be0593e8019f94fa

  • SHA512

    9a2528a98442e8ac309cdd873bbe7b6268d2c1f9d23e0edc598c33ce1ddc09900900720681ced430fd77982485b7cbd792f3490142bb3f695e9b2bce27dba178

  • SSDEEP

    768:iZEns9m9QEvkgoYUFvhwBzsjYqNx2hatF1a3K4pJ8Ci5D9FP9P:KQ/m/g/1sMMM05aa4p+l5HP9P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49531573467b307eaf7d087fd8e47675.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c8dadebed3414b4465733b8c4237f3f5

          SHA1

          dba9205ddb1a098c5df827b131bd4c24dc42ebb0

          SHA256

          5ae74af5adab4c206636d72f9089d4e164d7e9cfc32a1b37e3f355854a6c8b74

          SHA512

          952426ef34c66446f609d2c51661b1fa129e0b4dbdfdbb5afb3060e2726fc7eed29ac2ab80019bfa1cd01cdc881f76ce7a50bad2b0049fcb99699665cad0053f