Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 14:55

General

  • Target

    4bbb5c0a3ac7fc034851126402e7b949.pdf

  • Size

    71KB

  • MD5

    4bbb5c0a3ac7fc034851126402e7b949

  • SHA1

    d83c2b64e1eb8b434bc081095cc5e3a388061e44

  • SHA256

    c8c3a55e53c13c15a73fc2d1a739870129259f7e2b1a09fd9bb0f77204717b10

  • SHA512

    a07938e83d9b9354fcdaa6c7e37402dc64430c69a969783b888803dc524383c75180d0b74fe80c65959177a29c62d6d34ccb69f89f85515d2b40cf41edd1a9fd

  • SSDEEP

    1536:kGX7NHaU+BnnRx2KdhjMU4yi+NVuAo4/7TwNMlIrBPE:d7QUqnnRvbjj4z+S4T4MlIK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4bbb5c0a3ac7fc034851126402e7b949.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b785be3a35e1fef2f0cd97ffea6c00e6

          SHA1

          7b060b6b508b197cc55db90e404aa088092ee7a5

          SHA256

          284f5fac7f62fb759b23dda34fb36df4b5c595fd0d5fb9a4c066c1aff97bc03b

          SHA512

          527f776c4443a86fc0c4534755a9f4c7e78dcb1eda39a3b7c4c6890d850fd2209bd978cef3fa0d78f58d15ee8ba684e54bf4765686f2227dc3473f7457d30458