Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 03:09

General

  • Target

    9616bb31f150681240db3b0fc2ff16f4.pdf

  • Size

    86KB

  • MD5

    9616bb31f150681240db3b0fc2ff16f4

  • SHA1

    5601afdc65be34df6ec9974eaf9f1a78dd2c3f35

  • SHA256

    a4b192fdd15d9c0071a5ac5efa1ec3051ac1a5d63d9c3eb007f7d7a1709e10e6

  • SHA512

    4ee114c48b00e9c28eddb2db5dfa9f795cd0564d4da29ed945d2e2e6b99d719b39ff5b38ec0e260778cbddf060759560e5244bf610a1c761d5760658b3da45b8

  • SSDEEP

    1536:3XUQX20Q0s6s5lV2XfRJzrX96qNU8OeuuQBWGpOKCWtQOL1BxhBo7VCEMOnprRj:RG09O5nOJtR+82CKoOrxhqMOnX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9616bb31f150681240db3b0fc2ff16f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bf20c0856e8f244b409d7f013357b988

    SHA1

    22901da1301d2392f3a0bfc196a16a7509f535a8

    SHA256

    0db66c111c69af1eb1641392fa75e7df26fd8bb2a190b86d378d32bc087c6932

    SHA512

    f7fc7849c61ad30c3cc2455217eb246d6f3a055f1e3c14a68137c840cb923f200feb37185565b5b9272635d4b22f3f30b3c9267305732f0b048bd848b4191e1b