Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 16:22

General

  • Target

    4977ef2e01c023b2889e0b9cc9022226.pdf

  • Size

    94KB

  • MD5

    4977ef2e01c023b2889e0b9cc9022226

  • SHA1

    f00bf436427edfc8525961ce7282f4f979672b1d

  • SHA256

    5bc63b80fbde928fbfed4997099ec38e0dab2ae9c5d4e716a1a65c9323419b74

  • SHA512

    b9011e7f3d64cd962bbdbdf72ca7711099d96d594c38280750f615f6a3f6ea69f210f1d94141e268a3b55d244d8416becc6327fa4e468d6f4599a18c2183ebf9

  • SSDEEP

    1536:rYJApFUEmRUzwJJry/leMcHSS043WlYHQH33FsM1fqz4kAjvzRuhdlKuWxfYxQCW:sJApWEmewjCVcHSSDGGa33Hi0/0hdlsL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4977ef2e01c023b2889e0b9cc9022226.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    eb1f9a180311a64a9d9a6678dd0cb522

    SHA1

    906620e8b15d765ec0681483c906cba38b98d343

    SHA256

    86843c1c70b999d9493b31194226071339192eb4dc2e6732235c46e4dc7ad029

    SHA512

    18954a9ab96fde10bb9a195f0fdfeedff24fe769ce5798d79bf54170830347d507ee670e39e270350f7dfb6d0a3501eafce2b05b16769d9d8a919b8fef3d6e1c