Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 02:18

General

  • Target

    5244aa4f1736c4db0bb9303e940cfb08.pdf

  • Size

    93KB

  • MD5

    5244aa4f1736c4db0bb9303e940cfb08

  • SHA1

    0e9417dd3dd8175c1510b81a8e9278668c9b4141

  • SHA256

    89ce334270558d5f3b2fcf55e7cd4910388f16577a86fc66fd92d296b6810633

  • SHA512

    d134620bfbb31ea1bf4020f44a83ec882ab4d71b29ec8d660de338cddc5aadd3810a9715ce837d240a55d6aeeefd42361bf073ffc247b4e5c466339b53ef87a3

  • SSDEEP

    1536:30ZnFiX/CXAfRepGDBf5PB6GCdtT2wKJtwFMaVX6gBP8C5vmn4G46Wvj34yuKO9B:Ym/0Af4sf556GC72wK/wFMah6gJ8C9Vm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5244aa4f1736c4db0bb9303e940cfb08.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9b2f2915197c7c85202796dec9260a24

          SHA1

          f33e929a8d8122d5d8294885c826426bfe83d417

          SHA256

          42b6321930c8ca3845be9dabc0467b6571c43a41e6d4fb4c47d66ada1b489dcc

          SHA512

          4b41e703ea201bc9325ebb0a7154df40db091369ee39d781374233cd38e2723a9dc7178c3bd7e85b3e7de2cb9fb216b3fac0d15959ed259db567434850a08363