Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 00:06

General

  • Target

    4cd02765ea2dbbaee15576840b97e4a8.pdf

  • Size

    91KB

  • MD5

    4cd02765ea2dbbaee15576840b97e4a8

  • SHA1

    500e9017ff4dac3ad34f5a56fc872fc1849c4ba3

  • SHA256

    32a247b03fc4c6d9215a19f495ca99ff6025e7b5cbd889165ea50d4ee65d75ea

  • SHA512

    61e638e92c107fac2092a7988d553d3825571a973bc3bd9ac36d27f17de3213ad84292224af2c10439737f39feea89a1b54733323c7d7f30186a952a0a87e391

  • SSDEEP

    1536:LWQcRPKOg4PRtwPRO6n75Ti0Qn5G/PwIteEC3LbmCLCZqSykJC6dBkWhWh3Yvvyh:e8cRtmRO6nlRQn8PwGqCZ9JCG3KaUyRa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cd02765ea2dbbaee15576840b97e4a8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d1b15747e81259540831969910de080b

    SHA1

    c98a8477a6e6b85557339366ee8266c1acae1cb9

    SHA256

    2859a5c449cf0ab50604f7870c99a5b0981a92bc1f0c3892d0e3612aaa76636c

    SHA512

    bda44d8f4b17a03ac4749fddc2028f293bb76f06efa6e9867d84c627734bdee28f7882521cd614fcf6d7cef0e2f32e365793cdc5a9aacded955a34e8b28ae103