Analysis

  • max time kernel
    118s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-02-2024 02:17

General

  • Target

    95faf0c36a8fff537eece48340e46c56.pdf

  • Size

    85KB

  • MD5

    95faf0c36a8fff537eece48340e46c56

  • SHA1

    4ced375ae3026fc40fab84c5692e310f99e9e821

  • SHA256

    cc6c740bd0cc00ad8b70a8e912a00010da838a600925d8d4e3570433269c71a5

  • SHA512

    403e80d2c61d0d2d6592eb9b73a233265c3d476750bb000263124666a24f56cde67b30fd3df3ee82efaf2548a90f8c9dfbec9ea3046f096ca8874f0c6eaa32d7

  • SSDEEP

    1536:U4VRL8g3nWMf8im2MVPmdnI6rSnu0pL3dhRmMBKIWhom9oWapOtQHWMlQtgr2Jld:5XL8g3nWMhCPmx/reHzO9RtQwSmd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95faf0c36a8fff537eece48340e46c56.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93bb510d9494b9e39e7b2ab1a0679da9

    SHA1

    a016bfb03a862f4c6962a6c36939c2caebb87671

    SHA256

    ca1f73ce0eecf3e749b44c737d687e5eeeda5a7f223656096c20442bde2bdd0b

    SHA512

    b13bb7cb66815559a458fa2758c51da36f210654f8af9ea1b4c1553ffba0f49dc7a0a0326a3f86dc5444bbddcab77cb321db18bd6e4eab8cc1ab9f06fc90a22d