Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 01:39

General

  • Target

    4d01856261797da3747eb77e6ca2d350.pdf

  • Size

    34KB

  • MD5

    4d01856261797da3747eb77e6ca2d350

  • SHA1

    09598866a8a78b67f22126d07bb2db41805e63fa

  • SHA256

    6916d7da673389e914d8ee454fec2b284795269c282a7331dac385b25ae38056

  • SHA512

    5ba511b047d6eb99818d6ae1c42dcd9db249a63dc6373bab2e551ec6e0cf78c69b6f24f15ee16bbdc73f2d6528196baf9f9c0d1e5f118631b5b258dcd3d8b31a

  • SSDEEP

    768:Nunl5dXgl9Bk7lgyO/S1NVIGtMczscRd/+YUXbwemafX6DlkWg65d1QK6+3BC5Ql:Nunl5dXy9Bk7lgyO/S1NVlMcXmXbeafK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d01856261797da3747eb77e6ca2d350.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1588

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ac718a571711956ddc9f116d961e1480

          SHA1

          ee350f8023baf527a29c3abd7ea18dc47b8e27bd

          SHA256

          0727b408eefec2e422ebb84e9a6e7b8d76f748367fc3b3d9abae6f61e2a24070

          SHA512

          41f4f6f057818c25f408eda77a188310bedc8615e4a4ee270a180b3a07e8dddbe147f2d44c6fed143fae4678091676788008ce4277602f43179b343ad6a76916