Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 09:03

General

  • Target

    9b4425dce6be7773a277d291c6cce598.pdf

  • Size

    74KB

  • MD5

    9b4425dce6be7773a277d291c6cce598

  • SHA1

    9d019a59998341aa6c74e31c7bb4681096de4f13

  • SHA256

    0d1f916f58bcff8f9b71a965532f66e7f11f9c4c1eb07b4e2ae6b566f6f04e65

  • SHA512

    edf8a3a042df2f8577be8f79faa410d1466378028181c9e7589dab7a900e2d92a3c5f09ed7b7d9876a70f1f9e96a3a128b484b52af6634c9a8a947a346524151

  • SSDEEP

    1536:3Z0ekULD6ZTxu2byZqfgtNbmF0PMP0XG+gW0hBD+zv6iRui7WUpO728L:Jf6bu2AWgtNbmGes8hBD+QiO7v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b4425dce6be7773a277d291c6cce598.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8de1248d87b929ab06af3c38cbe64ae5

          SHA1

          cceaaef6748b41f54c7b68be285470aebec92b08

          SHA256

          d866761fe07739b158a9bdb0f58803b462b6f3ef4ac5c218a250cc84a2a8c12d

          SHA512

          b04a8a744c6927e33376b21a8ee963fbf8a7845b7cee5256b4fb246bb4c330b87df5343fa4b3c62ecb35f2b2d6bcc9e7a4d68d98af2e5c759db5e73a8d7f3522