Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 00:10

General

  • Target

    9a481fa4e74338bf0849b7d1d7ec4bce.pdf

  • Size

    73KB

  • MD5

    9a481fa4e74338bf0849b7d1d7ec4bce

  • SHA1

    590e2ab3270f73ad00981b7983b28b2226a64d54

  • SHA256

    a42dae5a062a64a24b44b1df067ecd0ba92e820510dc1c1e7d04ea3b0242e75d

  • SHA512

    78e37677e6a54fea1d79fe9038f24297537fa748fe338d3692f0d7fffdaa549ec4f8c9115afaa252abd2a623344b44fd800b3dca7e658bb5aa7281bd1a7ca518

  • SSDEEP

    1536:loiHE+g8/aC6pvAY1F1rk6sUYo49DrbNLH2gWYoOzE5W6pOu2jKOZMpW:agNRaBpvAy19Qr9DH9elau2jrZN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a481fa4e74338bf0849b7d1d7ec4bce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a4b6bceec7fdf36325c9eca3398ba135

    SHA1

    dce35fad0be32537a65a696fd5c9810b6811d8d9

    SHA256

    ab2feb96d4adf32f39d4113ca591ae499fd22ce21607037c1beff89b80ff7109

    SHA512

    4e526ff05e3bc7962b11b5537e4805aab1ad68c494cee8d7a571ce973973682640a9e88d59b1c95e7229c60ac3e551e7f4f3f7129d60e8cb92737f9045147fd7