Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2024 14:39

General

  • Target

    4bb3ebe81fd48d3e5145735cab0b05e4.pdf

  • Size

    78KB

  • MD5

    4bb3ebe81fd48d3e5145735cab0b05e4

  • SHA1

    98262046ac7fb157fbf379c48b4c50323b7b74c1

  • SHA256

    c43ee7819fef38ce2a4922b4f8d2099ab285fd5e536306f3a4f4b3f9898e4690

  • SHA512

    1e53cca9e5ba8ae46d6e4616d485d08637b3fd7f5b33383026616e98a52fbf6eb8975e6b740a077eb00c99816a7164847120d7501dbcf47d85d1d9b79a537da8

  • SSDEEP

    1536:wRwFS6VYw9KFiFC/rbhiGphBEg5HTihHXz+sJ5rq7URvlgMh:rSwYwS3hvggx8j+sJtqYHL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4bb3ebe81fd48d3e5145735cab0b05e4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9a020709e68c30f52709caa1fde82672

    SHA1

    70b1c4c368fe01ac46b394493b0c764866f77134

    SHA256

    3b596488d2d87a42d3b5e02b5a51c761d24f148221a2ce735ac62aea8e585336

    SHA512

    541ea36a0594d090089037b97bc8e62be74b7ef3d82f85442d20e953aa546d34165fb6e502dff1affa64f7ded7587471b4f0dc40ea6a1740b74b62ab4e0c25bc