Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09-01-2024 05:44

General

  • Target

    4d7e6f5df14804e3261f474b1e65522d.pdf

  • Size

    85KB

  • MD5

    4d7e6f5df14804e3261f474b1e65522d

  • SHA1

    e3a90f8c1684ae9b337f625e886d5f8d54211ced

  • SHA256

    dd1e59177496ea12d2cde2aec67b400dd8e11b0305a752e4f42344fd77b1c1d8

  • SHA512

    d2673ef6cae70c71f4df37e8753f7535d2fb47b374dec7aad39c571dcd9b2f526770c830fc8fa982fa954a2d4764d9a4bbe824baab095d1d42bc951fd15fd8fd

  • SSDEEP

    1536:cUODntUAx6j59JTbNlaJb6/k1x0Vxgw2kr+56R6vpB9yWB2W6QesyEoqoYWUpO78:QntUF95aJG/ix0V2wiQRI7dFoqo778

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d7e6f5df14804e3261f474b1e65522d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    28e0f07cd7276e1a1a5867565386d1d3

    SHA1

    e2b6f2ffb7d4187dc4985a70fa4f1d387e8a333b

    SHA256

    b976f3d77541096dd588fafa598880b6a1213f402ed3fe260a568e5837dc4afd

    SHA512

    d3232188a320092690a1e070d874ff5eae4c7a041d1fb544236445692fe362d2d58e5d9f0abee0c049a7764f9ae1a1c61b9fa85a5fdd72d55c62eaf0f0fdf2b2