Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 12:34

General

  • Target

    4e516ccb378bf8528c14533f95b5c716.pdf

  • Size

    87KB

  • MD5

    4e516ccb378bf8528c14533f95b5c716

  • SHA1

    d5e1892e9557da0a229a20328f31235926374468

  • SHA256

    a91b3df186fb517460f889f21c75cc167484fb2124c9ece6a785266942569d94

  • SHA512

    7bb035bd0951ae099a1105fbe6d2fc4b10ae79d91b06457d014384b569fd613b5716b840b113aa0103cf8ca259652e4b6e16706ee0f81d917be3ddcfc2cdbe56

  • SSDEEP

    1536:yAGBqraAfXF3DoyVLdKhLc5B4Su8a+ZaN2btbEAIWchqI3lMv4tWwpOSB5Y:aBqPXCgdKFcT4Su8HjbVEAU6v4US8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e516ccb378bf8528c14533f95b5c716.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0c951ae99cd02600bfafab71ee91ca79

          SHA1

          cbb97ff0ac1230d266f356e73df0a482e24994bb

          SHA256

          78907a414b50c5c55473b6673fda6771fa452c74fd8c16d2499f559f42daf00f

          SHA512

          88a02e5ed737a669e72e40981b9d8e6882b0ac19ce6836d4e1b858b2763efed9da3f239c838de749655c29a023b00ca94f238e5e137bac284f1d06032e72498b