Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 23:54

General

  • Target

    9a400847190f6e6583d1f40714475b1f.pdf

  • Size

    74KB

  • MD5

    9a400847190f6e6583d1f40714475b1f

  • SHA1

    dba2f65d3e8844869142fd408b9c2c29b0d58ab2

  • SHA256

    fdb7a648c7dd0b0a11353e3ceeb035ebfae9bcb983f19bf09bf81d520d404e4c

  • SHA512

    c1d8505ab76a888d7036bfa28e0a2134183d753cb2e00c9d7675eae45fe0809915a2605bb3b693f153f1102e17a17f6a8b2eafc81efff4bd0849e7050ed5f9e0

  • SSDEEP

    1536:LhLzi1ns7CXrZu75MscrSC1wmTE/NqtGHykPB+2SznOOl7efBWe2s5Zs5EWcp3Er:pivA7gF1wAE1qtGHykn5W3salcpx52R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a400847190f6e6583d1f40714475b1f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:808

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          99cee22f962ffac1a89f30072cb1ce84

          SHA1

          f6fe6c29131b14ecbfdd2273b25cf26adaa5c18d

          SHA256

          cbe56bfc4b26f3bbbf879ab83cfac541047d458cc3e9804363178aac5e589d99

          SHA512

          e293c6b0faa72fe938b5b18dd8b95f7e3aa6aea546252d00178242f9b5ca099348f9c7bd2bb97b34449f855a2f53ed374cbc3493d97e3732b9c479b3b53f159c