Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 21:19

General

  • Target

    4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf

  • Size

    469KB

  • MD5

    4e99dfd9bfd4d26ef28a907a2aa9d778

  • SHA1

    29e5959b094ac5e6bef108fb4ba1bf34aa9bde21

  • SHA256

    4bc6adc48083e79b0e909a91444d8bd716b10c1aa561103a0442d1beed3c3fc4

  • SHA512

    890da5166feac415a50794d4d21b6dd0fc54ab189e3e6c1052df4a1cd021afc744598b4adb56ee490b038c982a6422de2aa72dad7c22c9f31a9afb148dfd2973

  • SSDEEP

    6144:qhicHRDTJ/N/bS5k1q6grr5eojTzgtPY8BI02PSss9jwhq+vdf33JpupYu7O4:qEcpt/pq6gZjwKtWb+Fug4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4BC6ADC48083E79B0E909A91444D8BD716B10C1AA561103A0442D1BEED3C3FC4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aa1368e9ec47d8994a4ee0ea4f060fc6

          SHA1

          09eb72ea10416828b060ad3215399c11909f28c5

          SHA256

          06191fd493e2b76cd5fc1f793abdc4be2d2e6b606a6aec6888dc9a79a7ace271

          SHA512

          7bc4531adb016004a11f85b41824eb17912add3bf646c77b320ba496402f82ac6412b9b6597f89725d965e083e065adafd43f30c5b0a86d054427fb9b44c60f7