Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 08:14

General

  • Target

    4dcf0d4fee2b62cd5e44d484e5bb50d5.pdf

  • Size

    88KB

  • MD5

    4dcf0d4fee2b62cd5e44d484e5bb50d5

  • SHA1

    4dcd7c8250e87cc9e8c8d533372d94f8d396ce69

  • SHA256

    4f09e3e5b526e247b6a4d1b043ed3457a4be115372a3dca3d2c2b78ae5f8ab02

  • SHA512

    7f8fbe2c4ea50342861062a2c2953e7a12339a3e0b7733d57225b88ff8e4a64abf6c2c7a02808377c8683ce8686560478b1088d320b3ca406f38c8c4043989b0

  • SSDEEP

    1536:f+br57Y3H2M8EpnWcP+Xusff3p4rg1N+zqvdwDv/JzWRjoz6hNknq9RLWQpOCNIx:+dYX/nWIsfyrg1N+Wvdwr/Ji8zcNv9RY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4dcf0d4fee2b62cd5e44d484e5bb50d5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fc6bd45da3932cbd8969ea9c22a4dc6e

    SHA1

    d7b16d3267bd072af6d77b5813ffacbe2822d4bc

    SHA256

    a7f339267d4a782915dd3a8a662d4b7f9f173b83086eb1e8c808923b1fa08592

    SHA512

    1ecfe78bff14e0a44a86e24b81206b88101438ce6d28d61af8ae98afa10b08c0550ba2f5e18afbe33de4c3477ced00383f276d1fdea8a1b509e1f3d8fa127681