Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09-01-2024 10:21

General

  • Target

    4e0d38108ef7b9692b6bfec076b468fa.pdf

  • Size

    88KB

  • MD5

    4e0d38108ef7b9692b6bfec076b468fa

  • SHA1

    c8fa259d18f162770ad324453b4ee4a85f8d3626

  • SHA256

    2ab25450a2a32d6d2bf9d253e837d063e28034c533e6cc95a983f322aee7f909

  • SHA512

    d385b33f0e93a44e20fcb46af1b5cac0b1b37ddf06807b5ad24fdd8009e7b5400ff4cdd58a12f9fdd47ff48a0737b1260c9335a2345385d054f2ed6a0af4c9b8

  • SSDEEP

    1536:APqOcp3tWKgG5oWFdbVtBF6958JTnmguC55pS78FeILvMQWWUpO7qWeDPfdtu5oM:I6tWtojHf6Wnmgu4SYDvrh7obHu5XEta

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e0d38108ef7b9692b6bfec076b468fa.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5b063b2421b23ffa776082b642f806dd

    SHA1

    759969142d898d47a86f49d2c1e454962bd2176a

    SHA256

    d31bf0a676226e65a64f33aa859945856814bbe1c75ef30641d1ee9eab90d77f

    SHA512

    f6cd8cb9e2fdc67bd5307525d46bdfac0edc61e17ba22c77266da8d143151d6e69bf67981c9c78ca0f091cb1ca7e80f2019dd78ff34b78da9a6bfe7941d02f69