Analysis

  • max time kernel
    118s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 01:08

General

  • Target

    4f2e1abbe3d53efa446ea9664bc01e15.pdf

  • Size

    81KB

  • MD5

    4f2e1abbe3d53efa446ea9664bc01e15

  • SHA1

    e89f19bd8db1908d91493da8e07b9accc8a09f03

  • SHA256

    56cb680c6096296f9e56f64e01eeed20bef2a31f5b31159f74c99bf93e00b346

  • SHA512

    d312cb6149b859d18a4947407d177bc19d3e46e486e2fb9d457cd43d2700b1092bc646f5492261181ca8469914632566cd2ad486081f3436e205f575a165e749

  • SSDEEP

    1536:Cm9CUZ1TZP5ytEZ6YKJMiy28stfMyZ0REfxWapOtQHWxQR/wviQCiukl:vZbPctEsY2h9JMc0REf+tQgQR/w6Py

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4f2e1abbe3d53efa446ea9664bc01e15.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    94ff75eb8322a86b67c84a3df25cd4f7

    SHA1

    748e88aa26d898ddda8bd11fbd2b061e917eb9f1

    SHA256

    e80c01812d2845a12552fe21cb99f8535ae65a1c8ac551d6a25e44cd3e4746b2

    SHA512

    23097d2ec7402efcfd89a312e1772ec2019bf4074afe9ed3bc1a8ad5a9f915169fa020f788ea7a9e6ee67cd1749a9813dd3bcf911bca52e8442eb28dfbcbd161