Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 21:27

General

  • Target

    4c7e5f8c4ef42adaa8b7066656f7675a.pdf

  • Size

    85KB

  • MD5

    4c7e5f8c4ef42adaa8b7066656f7675a

  • SHA1

    86fc9e0d01fc7cc19d433284f33c21741f1f8fd5

  • SHA256

    f76f03f16b3ea30da7161d755d9f6c4418aacda886d82830e994d01323a710b6

  • SHA512

    64c945347882f470f819e13f0c4e3869fe640327518d3702dc3f9adfe55cb6150b469497335a806cd16aa5308a8ac86192a7b4d3157c6fc5faf48fe07d76f108

  • SSDEEP

    1536:4ovkAocxr/wGCDWsp+xHvyTbJ6kiwdvaqaP/rEBfi9yjRDMkvFNPc4s+X3hCzmFy:rooLEgQ60dSpXWfbjRDdPc4sgEKFy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c7e5f8c4ef42adaa8b7066656f7675a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          919aeec4df5502f3f17c134f93251a1a

          SHA1

          0ba85f9009452a95a3d22687a3d8e9a280efe959

          SHA256

          2c047566239791045a8101c65d24f4057473f4136b3003cea71e886e3908b1dd

          SHA512

          c91bf18d9dbf0138df6cc405be91c2cd9cc6b89c193b82413963d1b4245eccfaddcbb8d7821a97ff1929a06fcc47522aa0abebfda28ac6789409a4acdeacc256