Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09-01-2024 00:20

General

  • Target

    4cd74c38e47b0623619cc7f94a0c7094.pdf

  • Size

    42KB

  • MD5

    4cd74c38e47b0623619cc7f94a0c7094

  • SHA1

    2a06d2802753c39b0753b240a666c7640e2ee144

  • SHA256

    69d29f2bc14bb7dd3ccbbb5226bd710afef537183da23d0fd268f7c5e9c944c1

  • SHA512

    688a164acf085db24016583dfc961a0dc41a72974c64cf197444fc54410518d38d15c64cf5472b9e89fc6be94d93c4469cb21efe7a2b6d930afc7028939cb4fd

  • SSDEEP

    768:YIwy3eVV4XsD3WNfWThWIrG/svX85YgCwXfdjy1mzbC9vp5xkk:dZe0FNfWsIrGUvEYCXfdu1QO9vpHkk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cd74c38e47b0623619cc7f94a0c7094.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8a96a4eb6a448a6d76d16ee02b1f7738

    SHA1

    aaa01d781221d4449d205dd1301c05d286b3ee74

    SHA256

    6ca2e244571d4c222eb61ca1e7fafaaad9f293a8c5bb0b22835346d2bd4d027d

    SHA512

    5553b637a47ed9c4ba2e848bdcfa8316be70b67fd26ea83de612a2847b2e67d4933a3901bc597d50eb5dc09e004095420643d62ea6c3e16fc91747db51bd0de9