Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 06:35

General

  • Target

    9b024715e736474b1b59d97abefd15c4.pdf

  • Size

    94KB

  • MD5

    9b024715e736474b1b59d97abefd15c4

  • SHA1

    c5795e26b539388acd21a18a96e4686d3df70fb8

  • SHA256

    f11ccf74cf4f7d0aa16a6882828159b4ac1e10e7d62a9f2b1854a5b8a7764b1d

  • SHA512

    05dab791241e52e841815e372c2ff33f0824085ca3cf8a7b2b0cfd410e8034db78a8dda7e4740c90781f5b72c2d62dd52b78dd0f3c4482bd3b80359484d31254

  • SSDEEP

    1536:smqR76rNnm5NqXEnaEx5T3l15K2bMMEckOMK5GlZhkSWBHunr7JhIkWpwSqRjsoN:zG6RGhnx5Dl15KObkGGJkWrNikrSqRjL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b024715e736474b1b59d97abefd15c4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3e2fe27e383f9238d8db8f11fe83f217

    SHA1

    44c155ed0005b2b0d7296ed29e377f7a528c4c4d

    SHA256

    d69c9970c3eb1348413969bd14e74d963179ac2bd6cbd691d058bb3c63f13cff

    SHA512

    3d55dbb8c562edab6da1c55c8acf33932f680d5f1e06b6e78de2c053aeae6c9602a06d09037cd1955279f09fe957e4ba8dc5443f1fcc43d924c04525009f7b2c