Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 15:55

General

  • Target

    49694f33863ca4e7d4d5aa9803551897.pdf

  • Size

    81KB

  • MD5

    49694f33863ca4e7d4d5aa9803551897

  • SHA1

    40e2f0970fbbf6dc6f9cc246b8025c49e41c9ffb

  • SHA256

    e4dbd059311642e812644a25222026d8ebfe2249d2492e9632137fb1371654ef

  • SHA512

    874ed7cb90287f9db0290327147caa8428bd7acc02b16216d7087872321f27fbbb226ee88e86fbbedce17f3a823b7285bd43118a74377194eb18908e9b05240e

  • SSDEEP

    1536:dQ6plHqqN7LS0ujFRkwOWZSX/5M23KmJ4iu9jN10n0vwyp+vwH4nG3VcFDfB:HplP7LS0uJUaMKmJ4iupUUQvPnG3VAt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49694f33863ca4e7d4d5aa9803551897.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:536

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          586300fdf05d62f6340e363781b39ba1

          SHA1

          72cbba5adba7774ddcbb6c1bf9526a3f3789b669

          SHA256

          ef6aaec92dbaa0cda8d78658c948e3273270459e8a63f3c1f69688c96aa9d88c

          SHA512

          92fd4b83f911ad6fa85adf55076e8b24628686acb2ac6032862f93b92e3810e5f290016c25e09a06a4b5f407d78ccfc50046e5783d07812a21f5b53b978cf357