Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 22:59

General

  • Target

    4cae6149417446a9935ce032c08a9dd0.pdf

  • Size

    37KB

  • MD5

    4cae6149417446a9935ce032c08a9dd0

  • SHA1

    cb52bebc3af60dfe2045db4833ce9e248d136fdc

  • SHA256

    16ea1e5f67bdfb06967ef43cefade3e489d06636f831cddf45f284816f6fc316

  • SHA512

    5254e1b810be879a960046ad5003f713e22fcc824e5052f06da3fde9e25af6dfe6b40a837ae3d9039a73135e188bdf8e6b592c471617dc25e094877301f6e81e

  • SSDEEP

    768:qqopdmUv8wWD89Rcad1jw5NONzyqvvhpJH6fCIyL2IQLDvv+5HWztMwEWS+nMd:qqopdmU0wWg9qad1jwnONzyaH6a1aIQM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cae6149417446a9935ce032c08a9dd0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    efc02f18c66380ab96a03e7d6baa1ac8

    SHA1

    132fac1c8057a60e01859aa0735a0fbe9717eab4

    SHA256

    9d15d3ee9370d648248a12f85926ae8f5856f7cd905a3cba6cfdeb6beccba17a

    SHA512

    e45465a53049a3da7b722953b8525c8f1cc8fa44f72fd53d93bb66b737d5a6f4a41d25b7b05be8ee1defc3872ab1e6f5b875251da2beccbeffccc759eb88fa91