Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 12:06

General

  • Target

    4e4309f644edcb165a1317d113495cd2.pdf

  • Size

    87KB

  • MD5

    4e4309f644edcb165a1317d113495cd2

  • SHA1

    fbd5a97563a61706f53bf67127e13dcfd41e8d74

  • SHA256

    26a2e1be55a4eb5b5dd5f04abe05e756e5fdacbb3fdb8e1b39a3fda1c424001c

  • SHA512

    04262c1ddbba042f6508dabc4c33cfb75180fdba0a15fb4778eb288dc7ec65276ed4099555122619bd8ff26166d1b650c13c3151569b77548680e8f3d5c13e3c

  • SSDEEP

    1536:XNowyGk8QBEPOG/L305LKhYx+v3DjvCA//5N6tjyWcpOydWjZy06ZbfrVh5:9oVGk7E9YJx+v3P3/Xsj9yaZy06Njd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e4309f644edcb165a1317d113495cd2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ccfed8356c00bbded84f881a3cf26001

          SHA1

          822f6efaaaef1206174e5baa52a92c4d17c572ab

          SHA256

          6baaf8ba588f42012254cce1c59d5add0e1bce50f56917a8291ccf581a038fbb

          SHA512

          22f39cd7f7a2286fda46fc25b8301e98f2e9fb5554b9c4b4eebcc41dfd8182193c15f871eabb84208f4a3f8e6806397211703a7b682b8342ebb778291fff8e1a