Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 16:29

General

  • Target

    540433c928618e5fd54f9482a2ada2bb.pdf

  • Size

    84KB

  • MD5

    540433c928618e5fd54f9482a2ada2bb

  • SHA1

    aebc679fed0806675a9ac2c2d264b3fa6892bb3d

  • SHA256

    b71ab0f8e4a054b384abb462c219e3fbcdf27e1a2292b60c2ffe3f05c7b8e6b7

  • SHA512

    7d5bc019fa5c5e632030d757987e3395812c72853157cb2bf26e2725869aa88976c357677fc5711b010134eb39c1bb512e0eacc5f033d046ff8b516c285f381e

  • SSDEEP

    1536:pa96HpqOLyfjCnq+CE9bts33Rjn+e4GPOtEAK0wkWxApOGzWXCRW0SOTHL:1JOCnq+CE9G33p+IPxAK3l3GZSq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\540433c928618e5fd54f9482a2ada2bb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cf633233555342854d91ce79a7ec394e

    SHA1

    6043ee78a8fe146f650207af1c6bf3c89811674c

    SHA256

    96b904e1ce26a4aa9c0206048958b502dc17e3902c3deed143d45ed804b18079

    SHA512

    b6ae836556a18662c45dad0378cab2eb210cf182f28471154934d206275b542445bfab31ee93372ebadee55462ec1ec159eb3a0589f7380ce61275e38ec6ddc1