Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 10:20

General

  • Target

    4b2cf2871da5765303e7bfe0f516318e.pdf

  • Size

    86KB

  • MD5

    4b2cf2871da5765303e7bfe0f516318e

  • SHA1

    7b1ae49b5280171c806340bc9effd439b01eb021

  • SHA256

    1f696f0b6d97e30df895bf702de173d9c7cc256d29ff0e5bdca0b4d13e4bd681

  • SHA512

    a0776ab5e40684433d4129285660f56e7b97b1feffe34dac76efda944c3d745251b94989f97b73fcb04f6399e7c0e34e2c6bca933de962c8fb2c22bb1351ce75

  • SSDEEP

    1536:ynYov1JDedGhmQlQC26Z0a0Cs+AWZiHnbrpm5dvIW5W+hEzGfA7S72gLI8LWQpOG:1ovnys1KC26Z0a0AAPbrpm5dvJW+LA7O

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b2cf2871da5765303e7bfe0f516318e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    368f01b622e70a77924c072c1a30ba24

    SHA1

    1b90c7fe898e054008c9155e5ac9ee6a84e18328

    SHA256

    f3a56f403a1a9cd06835d039578ec6d4cf66c7029de828ff320cba57754ef6fd

    SHA512

    218a5b38de5f661f0de84610455af012606377e446dacc28eeae46788d7deae0e31400f66d8b110e5e0966e7df99748eec68a9078bd1a7a8f8b87d5966953170